Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-55227Observable object existence disclosure in private Weblate projects via globally scoped object lookupsPyPI · weblate · fixed in 2026.7
- CVE-2026-54569SENAITE.CORE: Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') and Missing Authorization in senaite.corePyPI · senaite-core
- CVE-2026-54548kas: Persistent SSH Host Key Checking DisablementPyPI · kas · fixed in 5.4
- CVE-2026-54553Starlette-Admin: Unvalidated `order_by` parameter allows ordering by hidden columns (info-exposure oracle) and HTTP 500 DoSPyPI · starlette-admin · fixed in 0.16.1
- CVE-2026-80206NLTK 3.10.2 Regular Expression Denial of Service via tgrepPyPI · nltk · fixed in 3.10.3
- CVE-2026-80205NLTK before 3.10.0 ReDoS via Text.findall() unvalidated regexPyPI · nltk · fixed in 3.10.0
- CVE-2026-57171Trestle is vulnerable to arbitrary file write via path traversal in author generate commands (Incomplete fix of CVE-2026-46345)PyPI · compliance-trestle · fixed in 3.12.4, 4.1.0
- CVE-2026-57170Trestle SSTI in Jinja2 include tags allows arbitrary code execution (Incomplete fix of CVE-2026-46439)PyPI · compliance-trestle · fixed in 3.12.4, 4.1.0
- CVE-2026-52776Trestle URLSecurityValidator SSRF allowlist bypass via IPv4-mapped IPv6 and 0.0.0.0PyPI · compliance-trestle · fixed in 4.1.0
- CVE-2026-54757Trestle has Server-Side Template Injection (SSTI) via Recursive Template Re-evaluation of Untrusted DataPyPI · compliance-trestle · fixed in 3.12.4, 4.1.0
- CVE-2026-65087NVIDIA NemoClaw contains a vulnerability where an attacker could cause insufficiently protected credentials .PyPI · uff
- CVE-2026-55099icalendar: Algorithmic Complexity in EqualityPyPI · icalendar · fixed in 7.1.3
- CVE-2026-45019Chainlit: SSRF via MCP SSE and streamable-http transports allows unauthenticated internal network accessPyPI · chainlit · fixed in 2.12.0
- CVE-2026-45018Chainlit: Command injection via MCP stdio transport allows unauthenticated remote code executionPyPI · chainlit · fixed in 2.12.0
- CVE-2026-55620eml_parser: DoS via deeply nested parens in Received headersPyPI · eml-parser · fixed in 3.0.2
- CVE-2026-55619eml_parser: Parser DoS via deeply nested parentheses in e-mail headersPyPI · eml-parser · fixed in 3.0.2
- CVE-2026-55618eml_parser: URL extraction bypass via HTML entities in URLsPyPI · eml-parser · fixed in 3.0.2
- CVE-2026-55419Reachy Mini: Unrestricted Upload of File with Dangerous TypePyPI · reachy-mini · fixed in 1.8.2
- CVE-2026-55585QWED: Authenticated Remote Code Execution via Unsafe SymPy `parse_expr()`PyPI · qwed · fixed in 5.1.2
- CVE-2026-55571djust authentication bypass: a login_required / on_mount LiveView mount redirect does not close the WebSocket, allowing an unauthenticated client to dispatch event-handler callsPyPI · djust · fixed in 1.0.4
- CVE-2026-55640Nextcloud MCP Server: Unauthenticated `POST /webhooks/nextcloud` allows arbitrary vector data deletion when `WEBHOOK_SECRET` is unset ( default )PyPI · nextcloud-mcp-server · fixed in 0.117.2
- CVE-2026-55546QWED-MCP: Unsafe SymPy `parse_expr()` Remote Code Execution via Unsanitized Math Expression InputPyPI · qwed-mcp · fixed in 0.2.1
- CVE-2026-55536Browser Server WebSocket origin validation bypass via unanchored regex (patch bypass of CVE-2026-40289 / GHSA-8x8f-54wf-vv92)PyPI · praisonai · fixed in 4.6.58
- CVE-2026-55532PraisonAI: Origin-validation bypass (startswith prefix match) enables unauthenticated cross-site request forgery against the PraisonAI MCP HTTP serverPyPI · praisonai · fixed in 4.6.58
- CVE-2026-79676NLTK before 3.10.3 Path Traversal via Symlink BypassPyPI · nltk · fixed in 3.10.3
- CVE-2026-79675NLTK before 3.10.3 JVM Argument Injection via Per-Call OptionsPyPI · nltk · fixed in 3.10.3
- CVE-2026-79674NLTK 3.10.2 Path Traversal via corpus-reader constructorsPyPI · nltk · fixed in 3.10.3
- CVE-2026-55533PraisonAI: Authentication fail-open in Recipe server allows unauthenticated access when API key or JWT auth is configured without a secretPyPI · praisonai · fixed in 4.6.58
- CVE-2026-55539PraisonAI: [Auth Bypass] PraisonAI async Jobs API (`/api/v1/runs`) has no authentication — unauthenticated job execution, result theft, cancel and deletePyPI · praisonai · fixed in 4.6.58
- CVE-2026-55527PraisonAI: Arbitrary file write via unsanitized `user_id` in `FileMemory.__init__()` — path traversal to any writable locationPyPI · praisonaiagents · fixed in 1.6.58