Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-55541PraisonAI: `--api-key` flag on `praisonai serve` is not properly enforcedPyPI · praisonai · fixed in 4.6.58
- CVE-2026-55535PraisonAI: Server-Side Request Forgery via DNS rebinding bypass in webhook_url validationPyPI · praisonai · fixed in 4.6.58
- CVE-2026-55537PraisonAI: Webhook SSRF via DNS fail-open in `JobSubmitRequest.validate_webhook_url()` — bypass of CVE-2026-40114PyPI · praisonai · fixed in 4.6.58
- CVE-2026-55538PraisonAI: [Auth Bypass] `praisonai serve agents --api-key` is silently ignored — agent-invocation routes (`POST /agents`, `POST /agents/{agent_name}`) run unauthenticatedPyPI · praisonai · fixed in 4.6.58
- CVE-2026-55540PraisonAI: [Path Traversal] agent tools escape the configured workspace via symlinksPyPI · praisonai · fixed in 4.6.58
- CVE-2026-55530PraisonAI: ast_grep_rewrite rewrites arbitrary files without the @require_approval gate enforced on every sibling mutation toolPyPI · praisonaiagents · fixed in 1.6.58
- CVE-2026-55534PraisonAI serve agents --api-key is ignored, allowing unauthenticated remote agent executionPyPI · praisonai · fixed in 4.6.58
- CVE-2026-55526PraisonAI: SSRF protection bypass in `spider_tools._host_is_blocked()` via DNS-resolved hostnames (`127.0.0.1.nip.io`)PyPI · praisonaiagents · fixed in 1.6.58
- CVE-2026-55531PraisonAI: Unauthenticated unbounded session accumulation in the PraisonAI MCP HTTP server (memory exhaustion; session TTL never enforced)PyPI · praisonai · fixed in 4.6.58
- CVE-2026-55528praisonaiagents: AgentServer declares auth_token but never enforces it on any route (CWE-862)PyPI · praisonaiagents · fixed in 1.6.58
- CVE-2026-55529PraisonAI: Origin validation bypass in MCP HTTP Stream transport allows browser-mediated unauthenticated tool execution on local MCP serverPyPI · praisonai · fixed in 4.6.58
- CVE-2026-55525PraisonAI: SSRF via redirect-following in praisonaiagents web_crawlPyPI · praisonaiagents · fixed in 1.6.58
- CVE-2026-79657NLTK before 3.10.3 Remote Code Execution via Unsafe Pickle DeserializationPyPI · nltk · fixed in 3.10.3
- CVE-2026-78684vLLM before 0.27.0 Denial of Service via DeepStream BackendPyPI · vllm · fixed in 0.27.0
- CVE-2026-78683NLTK before 3.10.0 Remote Code Execution via Unsafe Pickle DeserializationPyPI · nltk · fixed in 3.10.0
- CVE-2026-78682NLTK before 3.10.3 SSRF Protection Bypass via ProxyPyPI · nltk · fixed in 3.10.3
- CVE-2026-78681NLTK before 3.10.3 Entity Expansion DoS via ElementTreePyPI · nltk · fixed in 3.10.3
- CVE-2026-78680NLTK before 3.10.3 Arbitrary Code Execution via Graphviz dot BinaryPyPI · nltk · fixed in 3.10.3
- CVE-2026-78679GitPython before 3.1.59 Arbitrary File Read via TagReference.createPyPI · gitpython · fixed in 3.1.59
- CVE-2026-78678GitPython before 3.1.59 Arbitrary File Read via Repo.blame()PyPI · gitpython · fixed in 3.1.59
- CVE-2026-78677GitPython before 3.1.59 Path Traversal via separate-git-dirPyPI · gitpython · fixed in 3.1.59
- CVE-2026-78676GitPython before 3.1.59 Remote Code Execution via Config InjectionPyPI · gitpython · fixed in 3.1.59
- CVE-2026-78675GitPython before 3.1.59 Local File Content Disclosure via .gitmodulesPyPI · gitpython · fixed in 3.1.59
- CVE-2026-55468Wagtail: Improper restriction handling on Pages admin APIPyPI · wagtail · fixed in 7.0.9, 7.3.4, 7.4.3 and more
- CVE-2026-76098Mistune has Denial of Service — RecursionError via Excessive Emphasis Markers in MarkdownPyPI · mistune · fixed in 3.3.3
- CVE-2026-9769justhtml before 1.10.0 Denial of Service via deeply nested HTMLPyPI · justhtml · fixed in 1.10.0
- CVE-2026-8630justhtml before 1.12.0 Mutation XSS via Raw Text ElementsPyPI · justhtml · fixed in 1.12.0
- CVE-2026-8445justhtml before 1.12.0 Sanitizer Bypass via MarkdownPyPI · justhtml · fixed in 1.12.0
- CVE-2026-7808justhtml before 1.16.0 Multiple Security Issues via SanitizationPyPI · justhtml · fixed in 1.16.0
- CVE-2026-77088justhtml 0.9.0 through 1.21.0 Cross-Site Scripting via code-spanPyPI · justhtml · fixed in 1.22.0