Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-73558vLLM: Cross-User Data Leak VulnerabilityPyPI · vllm · fixed in 0.27.0
- CVE-2026-73557vLLM: Incomplete CVE-2025-62164 remediation can be bypassed by concurrent prompt partsPyPI · vllm · fixed in 0.26.0
- CVE-2026-73556vLLM: ReDoS via structured_outputs.regex in the lm-format-enforcer backend (no compile timeout) — missed sibling of CVE-2026-55574PyPI · vllm · fixed in 0.26.0
- CVE-2026-73555vLLM: Unauthenticated Internal Path and Username Disclosure via Validation Error MessagesPyPI · vllm · fixed in 0.26.0
- CVE-2026-73627JupyterLab 4.6.0 Plugin Manager Lock-Rule Enforcement BypassPyPI · jupyterlab · fixed in 4.6.2, 4.5.10
- CVE-2026-73626JupyterLab before 4.6.2 Authentication Bypass via PyPIExtensionManagerPyPI · jupyterlab · fixed in 4.6.2, 4.5.10
- CVE-2026-73625GitPython before 3.1.54 Remote Code Execution via kwarg value smugglingPyPI · gitpython · fixed in 3.1.54
- CVE-2026-73624GitPython before 3.1.54 Arbitrary File Overwrite via diffPyPI · gitpython · fixed in 3.1.54
- CVE-2026-73623GitPython before 3.1.54 Remote Code Execution via --templatePyPI · gitpython · fixed in 3.1.54
- CVE-2026-73622GitPython before 3.1.55 Environment Variable Exfiltration via Remote.add()PyPI · gitpython · fixed in 3.1.55
- CVE-2026-73621GitPython before 3.1.56 Arbitrary File Truncation via Commit.countPyPI · gitpython · fixed in 3.1.56
- CVE-2026-73620GitPython before 3.1.57 Arbitrary File Overwrite and ReadPyPI · gitpython · fixed in 3.1.57
- CVE-2026-73619GitPython before 3.1.57 Arbitrary File Read via Repo.archive()PyPI · gitpython · fixed in 3.1.57
- CVE-2026-73498MCP Atlassian is a Model Context Protocol (MCP): Arbitrary file read via missing path validation in confluence_upload_attachmentPyPI · mcp-atlassian · fixed in 0.22.0
- CVE-2026-73415jupyterlab: Image viewer in JupyterLab allows XSS when opening malicious image in new browser tabPyPI · jupyterlab · fixed in 4.6.2, 4.5.10
- CVE-2026-73295Material for MkDocs: DOM XSS in search suggestions via query parameterPyPI · mkdocs-material · fixed in 9.7.7
- CVE-2026-59244Apache Airflow: Secrets masker: `var.json` Variable values not masked in the Rendered Templates UIPyPI · apache-airflow, apache-airflow-core · fixed in 3.0.0, 3.3.1
- CVE-2026-58076Apache Airflow: Unguarded import_string() of airflow_exc_ser / base_exc_ser exception nodes in BaseSerialization.deserialize enables…PyPI · apache-airflow, apache-airflow-core · fixed in 3.3.1
- CVE-2026-59242Apache Airflow: Arbitrary airflow. class instantiation on the API server via the XCom deserialize endpointPyPI · apache-airflow, apache-airflow-core · fixed in 3.0.0, 3.3.1
- CVE-2026-54183Apache Airflow: Airflow Variables were not masked in the UI for authenticated usersPyPI · apache-airflow, apache-airflow-core · fixed in 3.0.0, 3.3.1
- CVE-2026-67260Apache Airflow: DAG-author remote code execution on the Scheduler via awaiting_input next_kwargs deserializationPyPI · apache-airflow, apache-airflow-core · fixed in 3.3.1
- CVE-2026-67587Apache Airflow: DAG-author remote code execution on the Scheduler via a Serde `Callback` deserialization gadgetPyPI · apache-airflow, apache-airflow-core · fixed in 3.3.1
- CVE-2026-65017Apache Airflow: Config API: team-scoped Celery broker secret disclosed to a Viewer (multi-team masking bypass)PyPI · apache-airflow, apache-airflow-core · fixed in 3.3.1
- CVE-2026-68968Apache Airflow: Authorization bypass in the Backfill API through conflicting interpretations of the backfill idPyPI · apache-airflow, apache-airflow-core · fixed in 3.0.0, 3.3.1
- CVE-2026-68969Apache Airflow: Bulk Variable and Connection endpoints record secret values in the audit log in cleartextPyPI · apache-airflow, apache-airflow-core · fixed in 3.0.0, 3.3.1
- CVE-2026-68970Apache Airflow: Values of a list-shaped Variable are not masked in task logs and the Rendered Templates UIPyPI · apache-airflow, apache-airflow-core · fixed in 3.0.0, 3.3.1
- CVE-2026-68971Apache Airflow: Cross-team authorization bypass in the asset materialization and dag-run result endpointsPyPI · apache-airflow, apache-airflow-core · fixed in 3.0.0, 3.3.1
- CVE-2026-68076Apache Airflow: Connections test API: team-scope guard bypass resolves another team's environment ConnectionPyPI · apache-airflow, apache-airflow-core · fixed in 3.0.0, 3.3.1
- CVE-2026-73262Prowler: Stored XSS in HTML reports through unescaped cloud resource tagsPyPI · prowler, prowler-cloud · fixed in 5.37.0
- CVE-2026-68868Apache Airflow Google provider: google Secret Manager backend: team scope is never applied, exposing every team's Connections and VariablesPyPI · apache-airflow-providers-google · fixed in 22.3.0