Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-88006Open WebUI: Users denied by the OAuth role policy can still sign in via token exchangePyPI · open-webui · fixed in 0.11.1
- CVE-2026-88005Open WebUI: Users denied by the OAuth domain allowlist or role policy can still sign in via token exchangePyPI · open-webui · fixed in 0.9.0
- CVE-2026-88002Open WebUI: Any authenticated user can hang the server via a cyclic chat message historyPyPI · open-webui · fixed in 0.11.1
- CVE-2026-88001Open WebUI: Server-side fetches reach blocked and internal hosts via unvalidated HTTP redirect targetsPyPI · open-webui · fixed in 0.11.1
- CVE-2026-88000Open WebUI: Any authenticated user can hang the server via message deletion in a cyclic chat treePyPI · open-webui · fixed in 0.11.1
- CVE-2026-87999Open WebUI: Any authenticated user can reach the Azure platform channel via server-side web fetchPyPI · open-webui · fixed in 0.11.1
- CVE-2026-87998Open WebUI: Non-admin users can delete admin-owned external knowledge connections via knowledge base deletionPyPI · open-webui · fixed in 0.11.1
- CVE-2026-87997Open WebUI: Any authenticated user can inject chats into another user's folder via chat completionsPyPI · open-webui · fixed in 0.11.1
- CVE-2026-87996Open WebUI: SSRF into internal services via DNS rebinding in the Playwright web loaderPyPI · open-webui · fixed in 0.11.1
- CVE-2026-87995Open WebUI: Same-origin XSS to account takeover via terminal port-preview iframe hardcoding allow-same-originPyPI · open-webui · fixed in 0.11.1
- CVE-2026-87994Open WebUI: Channel members can overwrite another member's message via the chat completions endpointPyPI · open-webui · fixed in 0.11.1
- CVE-2026-87017Open WebUI: Inaccessible knowledge bases are exposed through the built-in knowledge tool on most vector backendsPyPI · open-webui · fixed in 0.11.1
- CVE-2026-87016Open WebUI: Sign-in as another user via wildcard characters in the OAuth subject claim on SQLitePyPI · open-webui · fixed in 0.11.1
- CVE-2026-87015Open WebUI: A user's session cookies are sent to tool servers configured for bearer authenticationPyPI · open-webui · fixed in 0.11.1
- CVE-2026-87014Open WebUI: Admin demoted through SSO role sync keeps read and write access to all users' notesPyPI · open-webui · fixed in 0.11.1
- CVE-2026-87013Open WebUI: Any authenticated user can start a non-terminating request via a folder parent cyclePyPI · open-webui · fixed in 0.11.1
- CVE-2026-87012Open WebUI: Any authenticated user can suppress calendar alerts instance-wide via a non-numeric alert valuePyPI · open-webui · fixed in 0.11.1
- CVE-2026-87011Open WebUI: Unauthenticated requests can stall the server via uncached OIDC fetches in back-channel logoutPyPI · open-webui · fixed in 0.11.1
- CVE-2026-53956Rattler vulnerable to package cache path traversal via conda package build stringPyPI · py-rattler · fixed in 0.24.0
- CVE-2026-87819GitPython before 3.1.60 Denial of Service via ReDoSPyPI · gitpython · fixed in 3.1.60
- CVE-2026-87818GitPython 3.1.59 Local File Content Oracle via --no-indexPyPI · gitpython · fixed in 3.1.60
- CVE-2026-87817GitPython before 3.1.60 Remote Code Execution via Git Directory ImpersonationPyPI · gitpython · fixed in 3.1.60
- CVE-2026-86597Sensitive information written to logs by Snowflake driversPyPI · snowflake-connector-python · fixed in 4.7.3
- CVE-2026-86257wger before 2.6 CSV Formula Injection via member exportPyPI · wger · fixed in 2.6
- CVE-2026-86256wger before 2.6 Open Redirect via trainer-login next parameterPyPI · wger · fixed in 2.6
- CVE-2026-86255wger before 2.5 Uncontrolled Resource Consumption via date_sequencePyPI · wger
- CVE-2026-85394python-jose through 3.5.0 Algorithm Confusion via DER-encoded Public Key as HMAC SecretPyPI · python-jose · fixed in 3.4.0
- CVE-2026-53720pymonocypher: Potential heap buffer overflow on nb_blocks in argon2i_32 when provided buffer is too smallPyPI · pymonocypher · fixed in 4.0.2.8
- CVE-2026-84452Windows ML CLI: CORS misconfig enables localhost RCEPyPI · winml-cli · fixed in 0.4.0
- CVE-2026-84382HTTPX2: Streaming response decompression does not bound peak memory (decompression amplification)PyPI · httpx2 · fixed in 2.12.0