Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-67426Flyto2 Core: Unauthenticated flyto-verification /run: callback_url SSRF and internal runner-secret exfiltrationPyPI · flyto-core · fixed in 2.26.7
- CVE-2026-67425Flyto2 Core: LLM/API keys leak to an attacker-controlled base_urlPyPI · flyto-core · fixed in 2.26.7
- CVE-2026-13346pip absolute path traversal during download from malicious package indexesPyPI · pip · fixed in 26.2, 26.2.0
- CVE-2026-67424Flyto2 Core: Guarded HTTP modules follow redirects into internal space without per-hop SSRF revalidationPyPI · flyto-core · fixed in 2.26.7
- CVE-2026-54727proot-distro has a Container Isolation Bypass via Crafted Restore ArchivePyPI · proot-distro · fixed in 5.1.6
- CVE-2026-54574`proot-distro install` has a Symlink Escape (Arbitrary Host File Write) via Malicious Tar ArchivePyPI · proot-distro · fixed in 5.1.5
- CVE-2026-50558Penelope unsafe tar extraction allows arbitrary local file write via crafted session archivePyPI · penelope-shell-handler · fixed in 0.20.0
- CVE-2026-55389datamodel-code-generator vulnerable to arbitrary local file read via JSON-Schema `$ref` (`file://` and `../` traversal), bypassing `--no-allow-remote-refs`PyPI · datamodel-code-generator · fixed in 0.62.0
- CVE-2026-54653`datamodel-code-generator` vulnerable to code injection in via attacker-controlled `default_factory` schema fieldPyPI · datamodel-code-generator · fixed in 0.60.2
- CVE-2026-55391datamodel-code-generator vulnerable to SSRF protection bypass via DNS rebindingPyPI · datamodel-code-generator · fixed in 0.63.0
- CVE-2026-54656`datamodel-code-generator` vulnerable to code execution on import via unescaped `validators` entries in --extra-template-dataPyPI · datamodel-code-generator · fixed in 0.60.2
- CVE-2026-54690datamodel-code-generator vulnerable to SSRF via JSON-Schema `$ref` to HTTP URL (silent by default)PyPI · datamodel-code-generator · fixed in 0.61.0
- CVE-2026-55415datamodel-code-generator vulnerable to code injection via `x-python-import` / `customTypePath` in generated import statementsPyPI · datamodel-code-generator · fixed in 0.64.0
- CVE-2026-54621`datamodel-code-generator` vulnerable to code injection via unescaped carriage return in GraphQL Union descriptionPyPI · datamodel-code-generator · fixed in 0.60.1
- CVE-2026-54655`datamodel-code-generator` vulnerable to code execution on import via `x-python-type` JSON-Schema extension in datamodel-code-generatorPyPI · datamodel-code-generator · fixed in 0.60.2
- CVE-2026-55403datamodel-code-generator: Authorization / request headers leaked to cross-origin redirect target when fetching remote schemasPyPI · datamodel-code-generator · fixed in 0.63.0
- CVE-2026-54691datamodel-code-generator vulnerable to SSRF via --url: no host/IP validation, follows redirectsPyPI · datamodel-code-generator · fixed in 0.61.0
- CVE-2026-55390Arbitrary local file read via XSD `schemaLocation` (`xs:include`/`xs:import`) path traversal, with no remote-ref gatePyPI · datamodel-code-generator · fixed in 0.62.0
- CVE-2026-54654`datamodel-code-generator` vulnerable to code injection via unescaped carriage return in `--extra-template-data` `comment` fieldPyPI · datamodel-code-generator · fixed in 0.60.2
- CVE-2026-48060Litestar: HTML Injection Through CSRF TokenPyPI · litestar · fixed in 2.22.0
- CVE-2026-54635pytonapi has a Webhook Custom Path Authentication BypassPyPI · pytonapi · fixed in 2.2.1
- CVE-2026-54609QTINeon has unauthenticated relay-to-host amplification via unbounded RECONNECT_REQUEST forwardingPyPI · qti-neon
- CVE-2026-66053Apache Thrift: Python TSSLSocket Hostname Matcher ImportPyPI · thrift · fixed in 0.24.0
- CVE-2026-43871Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: TCompactProtocol varint byte-count limitPyPI · thrift · fixed in 0.24.0
- CVE-2026-41608Apache Thrift: Unbounded Zlib Decompression in Python THeaderTransportPyPI · thrift · fixed in 0.24.0
- CVE-2025-71408NLTK < 3.9.3 Eval Injection via collocations.py Command-Line ArgumentsPyPI · nltk · fixed in 3.9.3
- CVE-2026-66007Datasets Path Traversal via Unsanitized file_name MetadataPyPI · datasets · fixed in 5.0.1
- CVE-2026-66004BlenderMCP Path Traversal via download_polyhaven_asset APIPyPI · blender-mcp · fixed in 1.6.5
- CVE-2026-16796Improper neutralization of argument delimiters in AWS Bedrock AgentCore Python SDK install_packages()PyPI · bedrock-agentcore · fixed in 1.18.1
- CVE-2026-16584AWS API MCP Server Security Policy Bypass via Startup FailurePyPI · awslabs-aws-api-mcp-server · fixed in 1.3.47