Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-6827justhtml before 1.17.0 Multiple Cross-Site Scripting VulnerabilitiesPyPI · justhtml · fixed in 1.17.0
- CVE-2026-5751justhtml before 1.14.0 Mutation XSS via custom sanitization policiesPyPI · justhtml · fixed in 1.14.0
- CVE-2026-5389justhtml before 1.13.0 XSS via code fence breakoutPyPI · justhtml · fixed in 1.13.0
- CVE-2026-5388justhtml before 1.15.0 Multiple Security IssuesPyPI · justhtml · fixed in 1.15.0
- CVE-2026-4671justhtml before 1.18.0 Denial of Service via CSS SelectorPyPI · justhtml · fixed in 1.18.0
- CVE-2026-70626NLTK before 3.9.4 Symlink Escape via CorpusReaderPyPI · nltk · fixed in 3.9.4
- CVE-2026-66393NLTK before 3.9.4 Denial of Service via JSONTaggedDecoderPyPI · nltk · fixed in 3.9.4
- CVE-2026-65915NLTK before 3.10.0 Arbitrary File Read via FileSystemPathPointerPyPI · nltk · fixed in 3.10.0
- CVE-2026-63312NLTK StreamBackedCorpusView Bypasses pathsec.ENFORCE Arbitrary File ReadPyPI · nltk · fixed in 3.10.0
- CVE-2026-63311NLTK before 3.10.0 SSRF via DNS Resolution FailurePyPI · nltk · fixed in 3.10.0
- CVE-2026-62388NLTK before 3.10.0 Insecure Default Configuration in pathsec.pyPyPI · nltk · fixed in 3.10.0
- CVE-2026-62385NLTK 3.9.4 Path Traversal via FrameNet and NKJP ReadersPyPI · nltk · fixed in 3.10.0
- CVE-2026-62384NLTK FramenetCorpusReader Symlink Sandbox Bypass before 3.10.2PyPI · nltk · fixed in 3.10.2
- CVE-2026-62383nltk IPIPANCorpusReader Symlink Arbitrary File ReadPyPI · nltk · fixed in 3.10.2
- CVE-2026-71514NLTK 3.9.4 through 3.10.2 Path Traversal via CrubadanCorpusReader pathsec BypassPyPI · nltk · fixed in 3.10.3
- CVE-2026-71513NLTK 3.10.0 through 3.10.2 Remote Code Execution via AllowlistUnpickler Dotted-Name BypassPyPI · nltk · fixed in 3.10.3
- CVE-2026-49360Recce server has unauthenticated SQL execution that allows local file read/write through DuckDBPyPI · recce · fixed in 1.50.0
- CVE-2026-43980Malla: Stored XSS via Meshtastic node names in multiple frontend pagesPyPI · malla
- CVE-2026-61539Xinference: Remote code execution via unsafe `eval()` in Llama3 tool-call parsingPyPI · xinference · fixed in 2.7.0
- CVE-2026-53656FiftyOne App server uses wildcard CORS (Access-Control-Allow-Origin: *), enabling cross-origin reads of local server dataPyPI · fiftyone · fixed in 1.17.0
- CVE-2026-54457TensorZero: Arbitrary file read and SSRF in TensorZero Gateway's internal object storage endpointPyPI · tensorzero · fixed in 2026.6.0
- CVE-2026-68508Hydra: hydra.utils.instantiate with untrusted config can lead to code executionPyPI · hydra-core · fixed in 1.3.4
- CVE-2026-54071BabelDOC: Arbitrary Code Execution via CMap Pickle Deserialization in babeldoc/pdfminer/cmapdb.pyPyPI · babeldoc · fixed in 0.6.3
- CVE-2026-54134OctoPrint: File exfiltration possible via query parameters on upload endpointsPyPI · octoprint · fixed in 1.11.8, 2.0.0rc3
- CVE-2026-35163OctoPrint: XSS in Suppressed Command NotificationsPyPI · octoprint · fixed in 1.11.8, 2.0.0rc3
- CVE-2026-62675Omnigent: Uploaded Agent Bundle Allows Authenticated Runner RCE via Python Callable ToolsPyPI · omnigent · fixed in 0.3.0
- CVE-2026-62674Omnigent: Shared Agent Bundle Overwrite Leads to Authenticated Runner RCEPyPI · omnigent · fixed in 0.3.0
- CVE-2026-62677Omnigent: Unvalidated os_env.cwd in agent bundle yields arbitrary host filesystem access on runners without OMNIGENT_RUNNER_WORKSPACEPyPI · omnigent · fixed in 0.3.0
- CVE-2026-62676Omnigent Guardrail policy bypass: shell-command parser fails open in policies/builtins/_shell.pyPyPI · omnigent · fixed in 0.3.0
- CVE-2026-49114ONNX symlink-following and path-traversal arbitrary file writePyPI · onnx · fixed in 1.21.0