Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-68868Apache Airflow Google provider: google Secret Manager backend: team scope is never applied, exposing every team's Connections and VariablesPyPI · apache-airflow-providers-google · fixed in 22.3.0
- CVE-2026-9318tablib versions prior to 3.10.0 Stored XSS via HTML Export Dataset TitlePyPI · tablib · fixed in 3.10.0
- CVE-2026-48813Flawfinder output manipulation via untrusted filenames and source textPyPI · flawfinder · fixed in 2.0.20
- CVE-2026-48804python-socketio: Binary attachment accumulation can cause denial of servicePyPI · python-socketio · fixed in 5.16.2
- CVE-2026-73229Django REST framework: AdminRenderer may disclose GET-protected data when rendering invalid write requestsPyPI · djangorestframework · fixed in 3.17.2
- CVE-2026-73228Django REST framework: Potential bypass of Django `DATA_UPLOAD_MAX_MEMORY_SIZE` when parsing oversized JSON and urlencoded request bodies via DRF `request.data`PyPI · djangorestframework · fixed in 3.17.2
- CVE-2026-48802python-engineio has unbound thread allocation that can cause denial of servicePyPI · python-engineio · fixed in 4.13.2
- CVE-2026-48809python-engineio has possible denial of service due to maximum payload size sometimes not being enforcedPyPI · python-engineio · fixed in 4.13.2
- CVE-2026-18948Feast: feast: unsafe dill deserialization of registry-stored udfs — rce on feature server and registry serverPyPI · feast · fixed in 0.67.0
- CVE-2026-69112Hugging Face Accelerate 1.14.0 Path Traversal and DoS via weight_mapPyPI · accelerate
- CVE-2026-68872Apache Airflow Amazon provider: amazon SSM / Secrets Manager backends: team-scope guard bypass resolves another team's Connection or VariablePyPI · apache-airflow-providers-amazon · fixed in 9.34.0
- CVE-2026-68871Apache Airflow Yandex provider: yandex Lockbox backend: team-scope guard bypass resolves another team's Connection or VariablePyPI · apache-airflow-providers-yandex · fixed in 4.5.1
- CVE-2026-12570Denial of Service via HDF5 Shape Bomb in keras.models.load_model() in keras-team/kerasPyPI · keras · fixed in 3.15.0
- CVE-2026-12372Server-Side Request Forgery (SSRF) in nltk/nltkPyPI · nltk · fixed in 3.10.0
- CVE-2026-48169PraisonAI has Cross-Workspace IDOR and Privilege Escalation via Platform APIPyPI · praisonai-platform · fixed in 0.1.4
- CVE-2026-54338JupyterHub: Unauthenticated Denial of Service via Unbounded Username Logging on Failed LoginPyPI · jupyterhub · fixed in 5.5.0
- CVE-2026-48039Meta Ads MCP: Unauthenticated HTTP MCP Tool Execution Leaks Operator Meta Access TokenPyPI · meta-ads-mcp · fixed in 1.0.109
- CVE-2026-71870pypdf: Possible large memory usage for large /ToUnicode streamsPyPI · pypdf · fixed in 6.15.0
- CVE-2026-71852pypdf: Possible long runtimes/large memory usage for large CID font width rangesPyPI · pypdf · fixed in 6.15.0
- CVE-2026-12261Improper Access Control in nltk/nltkPyPI · nltk · fixed in 3.10.0
- CVE-2026-71554h2: Duplicate Host header could facilitate request smugglingPyPI · h2 · fixed in 4.4.1
- CVE-2026-61632PyMdown Extensions: Path traversal in the b64 extension lets <img src> read files outside base_pathPyPI · pymdown-extensions · fixed in 11.0.0
- CVE-2026-67422pymdown-extensions: Exponential-backtracking ReDoS in caret, tilde, betterem, and magiclink inline processorsPyPI · pymdown-extensions · fixed in 11.0.1
- CVE-2026-71433LangGraph: Namespace prefix matching crosses segment boundaries in Postgres and SQLite storesPyPI · langgraph-checkpoint-postgres, langgraph-checkpoint-sqlite · fixed in 3.1.1
- CVE-2026-70646aiosend: Deserialization of request body before signature verification (Pre-auth DoS) in webhook handlerPyPI · aiosend · fixed in 3.0.7
- CVE-2026-64640Apache Polaris: register endpoint reads attacker-controlled storage location before allowed-locations validationPyPI · apache-polaris · fixed in 1.7.0
- CVE-2026-55524PraisonAI: SSRF in web_crawl tool via redirect-following and DNS rebinding (validate-then-fetch gap)PyPI · praisonaiagents · fixed in 1.6.58
- CVE-2026-55523PraisonAI has a`web_crawl` SSRF protection bypass via unchecked redirect targetsPyPI · praisonaiagents · fixed in 1.6.58
- CVE-2026-55522PraisonAI workflow include bypasses tools.py autoload opt-in and executes included recipe codePyPI · praisonai, praisonaiagents · fixed in 4.6.58, 1.6.58
- CVE-2026-9205Langflow is affected by weaknesses in secret handling and sensitive configuration accessPyPI · langflow · fixed in 1.10.1