Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-77776Headroom Proxy Treats the Client-Supplied x-headroom-user-id Header as an Authenticated IdentityPyPI · headroom-ai · fixed in 0.36.1
- CVE-2026-77775Headroom Proxy Sends Upstream Requests to a Client-Supplied Base URL Without Address ValidationPyPI · headroom-ai · fixed in 0.36.1
- CVE-2026-72818NLTK TweetTokenizer URL Pattern Backtracks Catastrophically on Naked-Domain-Like InputPyPI · nltk · fixed in 3.10.1
- GHSA-92HV-J533-69WCWagtail: Identification of documents by SHA1 hashPyPI · wagtail · fixed in 7.0.9, 7.3.4, 7.4.3 and more
- CVE-2026-75526django CMS: Stored XSS in edit-mode plugin exception renderingPyPI · django-cms · fixed in 5.0.9
- CVE-2026-63003django CMS: Broken access control in page *Duplicate* allows reading the content of any page (cross-site / restriction bypass)PyPI · django-cms · fixed in 5.0.9
- CVE-2026-61663django CMS: Missing authorization in `render_object_structure` discloses non-PageContent placeholder structure to low-privileged staffPyPI · django-cms · fixed in 5.0.9
- CVE-2026-54622django CMS: Clipboard copy IDOR discloses unauthorized plugin contentPyPI · django-cms · fixed in 5.0.8
- CVE-2026-54624django CMS: Structure endpoint bypasses page-view permissionPyPI · django-cms · fixed in 5.0.8
- CVE-2026-54623django CMS: Plugin move endpoint allows cyclic reparenting (DoS)PyPI · django-cms · fixed in 5.0.8
- CVE-2026-54625django CMS: Page cache ignores plugin-declared Vary headers (disclosure & poisoning)PyPI · django-cms · fixed in 5.0.8
- CVE-2026-71428unstructured: Server-Side Request Forgery in the URL-based partitioningPyPI · unstructured · fixed in 0.24.0
- CVE-2026-54770WebOb: Open redirect in Location header normalization via leading C0 control / space charactersPyPI · webob · fixed in 1.8.11
- CVE-2026-71492Banks: Path traversal in `DirectoryPromptRegistry.set()` allows arbitrary file write outside the registry rootPyPI · banks · fixed in 2.4.5
- CVE-2026-54449LangBot: Authenticated RCE Via MCP ConfigurationPyPI · langbot
- CVE-2026-49825lxml: javascript: URL bypass in Cleaner via xlink:hrefPyPI · lxml-html-clean · fixed in 0.4.5
- CVE-2026-55558aiosmtplib: STARTTLS response injectionPyPI · aiosmtplib · fixed in 5.1.2
- CVE-2026-76245stigmem Federation Peer Token Timestamp Validation BypassPyPI · stigmem-node · fixed in 0.9.0a2
- CVE-2026-76244stigmem-node Insecure Federation Transport ConfigurationPyPI · stigmem-node · fixed in 0.9.0a2
- CVE-2026-76243stigmem before 0.9.0a2 Authentication Bypass via Disabled AuthPyPI · stigmem-node · fixed in 0.9.0a2
- CVE-2026-76242stigmem Federation Peer Registration Authentication BypassPyPI · stigmem-node · fixed in 0.9.0a2
- CVE-2026-76241stigmem Plugin Signature Enforcement Bypass via ConfigurationPyPI · stigmem-node · fixed in 0.9.0a2
- CVE-2026-76240stigmem Postgres SQL Injection via Schema IdentifierPyPI · stigmem-node · fixed in 0.9.0a2
- CVE-2026-76239Stigmem before 0.9.0a11 SSRF via unvalidated webhook delivery_addressPyPI · stigmem-node · fixed in 0.9.0a11
- CVE-2026-76238stigmem before 0.9.0a12 Cross-Tenant BOLA via decay sweepPyPI · stigmem-node · fixed in 0.9.0a12
- CVE-2026-76237stigmem before 0.9.0a12 Cross-Tenant BOLA via quarantinePyPI · stigmem-node · fixed in 0.9.0a12
- CVE-2026-76236stigmem before 0.9.0a12 Cross-Tenant BOLA via TombstonesPyPI · stigmem-node · fixed in 0.9.0a12
- CVE-2026-76222GitPython before 3.1.58 Path Traversal via .gitmodules Submodule NamePyPI · gitpython · fixed in 3.1.58
- CVE-2026-76221GitPython before 3.1.58 Config Injection via option-namePyPI · gitpython · fixed in 3.1.58
- CVE-2026-76220GitPython before 3.1.58 Command Execution via split_single_char_optionsPyPI · gitpython · fixed in 3.1.58