Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-16584AWS API MCP Server Security Policy Bypass via Startup FailurePyPI · awslabs-aws-api-mcp-server · fixed in 1.3.47
- CVE-2026-47731NASA AMMOS Instrument Toolkit: Path traversal resulting in arbitrary file append (can be triggered over the network by unauthenticated attacker)PyPI · ait-core · fixed in 2.6.1, 3.1.1
- CVE-2026-47708MCP-for-Stata: Command injection via log_file_name parameter in Stata command wrapperPyPI · stata-mcp · fixed in 1.17.3
- CVE-2026-46556FlaskBB: SSRF in get_image_info() via unrestricted avatar URLPyPI · flaskbb
- CVE-2026-47143Capstone has a NULL Pointer Dereference with 3DNow! opcodesPyPI · capstone · fixed in 5.0.8
- CVE-2026-47425Rattler vulnerable to entry-point path traversal in noarch:python install (arbitrary file write)PyPI · py-rattler · fixed in 0.24.0
- CVE-2026-47419praisonai-platform: Agent endpoints accept any agent_id without workspace ownership check, cross-workspace read/update/delete IDORPyPI · praisonai-platform · fixed in 0.1.4
- CVE-2026-47418praisonai-platform: Project endpoints accept any project_id without workspace ownership check, cross-workspace read/update/delete IDORPyPI · praisonai-platform · fixed in 0.1.4
- CVE-2026-47417praisonai-platform: Comment endpoints accept any issue_id without workspace ownership check, cross-workspace comment read and post IDORPyPI · praisonai-platform · fixed in 0.1.4
- CVE-2026-47416praisonai-platform: Any workspace member can promote themselves (or any other member) to owner via PATCH /workspaces/{id}/members/{user_id}PyPI · praisonai-platform · fixed in 0.1.4
- CVE-2026-47415praisonai-platform: Issue endpoints accept any issue_id without workspace ownership check, cross-workspace read/update/delete IDORPyPI · praisonai-platform · fixed in 0.1.4
- CVE-2026-47414praisonai-platform: Label endpoints accept any label_id and any issue_id without workspace ownership check, cross-workspace label edit/delete and issue-label-link IDORPyPI · praisonai-platform · fixed in 0.1.4
- CVE-2026-47413praisonai-platform: Any workspace member can add arbitrary user as owner via POST /workspaces/{id}/membersPyPI · praisonai-platform · fixed in 0.1.4
- CVE-2026-47412praisonai-platform: Any workspace member can delete the entire workspace via DELETE /workspaces/{id}PyPI · praisonai-platform · fixed in 0.1.4
- CVE-2026-47411praisonai-platform: Any workspace member can rewrite workspace name, description, and settings via PATCH /workspaces/{id}PyPI · praisonai-platform · fixed in 0.1.4
- CVE-2026-47410praisonai-platform: JWT signing key defaults to hardcoded "dev-secret-change-me", allowing token forgery for any user when PLATFORM_ENV is unsetPyPI · praisonai-platform · fixed in 0.1.4
- CVE-2026-47409praisonai-platform: Any workspace member can remove any other member (including the owner) via DELETE /workspaces/{id}/members/{user_id}PyPI · praisonai-platform · fixed in 0.1.4
- CVE-2026-47408praisonai-platform: list_issue_activity returns activity log for any issue regardless of workspace ownershipPyPI · praisonai-platform · fixed in 0.1.4
- CVE-2026-47407PraisonAI Platform has a cross-workspace IDOR + member-role privilege escalationPyPI · praisonai-platform · fixed in 0.1.4
- CVE-2026-47406praisonai-platform: Dependency endpoints accept any issue_id and dep_id without workspace ownership check, cross-workspace issue linking + read + delete IDORPyPI · praisonai-platform · fixed in 0.1.4
- CVE-2026-47405PraisonAI Platform missing role checks let any workspace member become owner and take over workspace membershipPyPI · praisonai-platform · fixed in 0.1.4
- CVE-2026-47399PraisonAI Platform workspace-scoped routes allow cross-workspace object access by global object IDPyPI · praisonai-platform · fixed in 0.1.4
- CVE-2026-47398PraisonAI: Arbitrary code execution via unguarded `spec.loader.exec_module` in `agents_generator.py` - sibling of CVE-2026-44334PyPI · praisonai · fixed in 4.6.40
- CVE-2026-47397PraisonAI has an Arbitrary File Write in Python APIPyPI · praisonai · fixed in 4.6.40
- CVE-2026-47396PraisonAI call server exposes unauthenticated agent listing, invocation, and deletion when CALL_SERVER_TOKEN is unsetPyPI · praisonai · fixed in 4.6.40
- CVE-2026-47395PraisonAI CLI automatically resolves @url mentions in prompt text and can read loopback URLs into model contextPyPI · praisonai, praisonaiagents · fixed in 4.6.40, 1.6.40
- CVE-2026-47394PraisonAI vulnerable to unauthenticated arbitrary file read via MCP workflow.show, workflow.validate, deploy.validatePyPI · praisonai · fixed in 4.6.40
- CVE-2026-64825Home Assistant Core < 2026.6.0 Path Traversal File Write via Backup UploadPyPI · homeassistant · fixed in 2026.6.0
- CVE-2026-64824Home Assistant Core < 2026.7.0 Symlink Path Traversal RCE via backup-restorePyPI · praisonai · fixed in 4.6.40
- CVE-2026-47393PraisonAI `deploy --type api` emits a Flask server with authentication disabled by defaultPyPI · praisonai · fixed in 4.6.40