Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-59178ESPHome Device Builder: Renamed auth env vars silently disable dashboard authentication on upgradePyPI · esphome-device-builder · fixed in 1.0.12
- CVE-2026-54723devpi: Database contents leakPyPI · devpi-server · fixed in 6.20.2
- CVE-2026-54567Flask-Reuploaded: Extension-denylist bypass via case-folding asymmetry in name-override path (incomplete-fix variant of CVE-2026-27641)PyPI · flask-reuploaded · fixed in 1.6.0
- CVE-2026-55253LangChain MongoDB: NoSQL Operator Injection in MongoDBSaver.list() leading to cross-tenant data exposurePyPI · langgraph-checkpoint-mongodb, langgraph-store-mongodb · fixed in 0.3.0, 0.4.0
- CVE-2026-55837dbt-mcp: Unauthenticated OAuth Context Endpoint Leaks dbt Platform TokensPyPI · dbt-mcp · fixed in 1.20.0
- CVE-2026-55073WeasyPrint restrictive URL fetcher bypass allows local file read and SSRFPyPI · weasyprint · fixed in 70.0
- CVE-2026-53708ContextForge: DNS TOCTOU race condition causes SSRF protection bypass (`/admin/gateways/test`)PyPI · mcp-contextforge-gateway · fixed in 1.0.3
- CVE-2026-55235langgraph-api: Relative webhook targets in LangGraph Server can reach in-process routes without authenticationPyPI · langgraph-api · fixed in 0.10.0
- CVE-2026-55236langgraph-api: Incomplete assistant authorization in LangGraph Server run creationPyPI · langgraph-api · fixed in 0.10.0
- CVE-2026-54529SQLAdmin: Unvalidated sortBy parameter in `ModelView` bypasses `column_sortable_list`PyPI · sqladmin · fixed in 0.27.1
- CVE-2026-57145PraisonAI: Arbitrary File Read/Write via `multiedit` Tool Without Path ValidationPyPI · praisonai · fixed in 4.6.61
- CVE-2026-57132PraisonAI: PRAISONAI_CALL_AUTH=disabled environment variable unconditionally disables authenticationPyPI · praisonai · fixed in 4.6.61
- CVE-2026-57131praisonai: Jobs API exposes agent-execution endpoints with no authenticationPyPI · praisonai · fixed in 4.6.59
- CVE-2026-57124PraisonAI UI MCP connect endpoint allows unauthenticated local command executionPyPI · praisonai · fixed in 4.6.59
- CVE-2026-57122PraisonAI: Webhook signature verification skipped (fail-open) when secret unset, allowing forged inbound webhooks (WhatsApp & Linear bots)PyPI · praisonai · fixed in 4.6.59
- CVE-2026-57127praisonai: recipe serve auth middleware silently disables itself when no secret is setPyPI · praisonai · fixed in 4.6.59
- CVE-2026-56839PraisonAI Code agent tools fail open without a workspace boundaryPyPI · praisonai · fixed in 4.6.59
- CVE-2026-57119PraisonAI: Unauthenticated Local File Inclusion via agent_file path in the Jobs APIPyPI · praisonai · fixed in 4.6.59
- CVE-2026-57129PraisonAI: Arbitrary File Read via `@file:` Mention Path TraversalPyPI · praisonaiagents · fixed in 1.6.59
- CVE-2026-57126praisonaiagents: SSRF guard validates literal IPs only and never resolves DNSPyPI · praisonaiagents · fixed in 1.6.59
- CVE-2026-57120PraisonAI: execute_code sandbox bypass: str.format C-level attribute access reads every blocklisted dunderPyPI · praisonaiagents · fixed in 1.6.59
- CVE-2026-57123PraisonAI: MCP SSE transport binds 0.0.0.0 with no authentication and no Origin validation; bundled SecurityConfig is never wired inPyPI · praisonaiagents · fixed in 1.6.59
- CVE-2026-57130PraisonAI: IMAP Command Injection via Unsanitized Email Search ParametersPyPI · praisonaiagents · fixed in 1.6.59
- CVE-2026-57128PraisonAI: Unauthenticated Event Injection via SSE `/publish` EndpointPyPI · praisonaiagents · fixed in 1.6.59
- CVE-2026-57115PraisonAI: SpiderTools redirect-target SSRF protection bypassPyPI · praisonaiagents · fixed in 1.6.59
- CVE-2026-57125PraisonAI: Unauthenticated RCE via Jobs API + Approval BypassPyPI · praisonai, praisonaiagents · fixed in 4.6.59, 1.6.59
- CVE-2026-90553vLLM before 0.28.0 Remote Code Execution via LlavaOnevision2 processorPyPI · vllm · fixed in 0.28.0
- CVE-2026-71416Headroom vulnerable to Cross-Site WebSocket Hijacking (CSWSH)PyPI · headroom-ai · fixed in 0.35.0
- CVE-2026-49836psd-tools: arbitrary file write via smart-object filenamePyPI · psd-tools · fixed in 1.17.1
- CVE-2026-88029GridFS data disclosure and deletion via query-operator injection in file IDs in the MongoDB Python DriverPyPI · pymongo · fixed in 4.18.1