Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-15925Improper TLS Hostname Verification in Snowflake Connector for PythonPyPI · snowflake-connector-python · fixed in 3.18.1, 4.7.1
- CVE-2026-59950MCP Python SDK: WebSocket server transport does not support Host/Origin validationPyPI · mcp · fixed in 1.28.1
- CVE-2026-52870MCP Python SDK: Experimental task handlers allow any client to access and cancel other clients' tasksPyPI · mcp · fixed in 1.27.2
- CVE-2026-52869MCP Python SDK: HTTP transports serve session requests without verifying the authenticated principalPyPI · mcp · fixed in 1.27.2
- CVE-2026-58659PyTorch Lightning Arbitrary Code Execution via _instantiator HyperparameterPyPI · lightning, pytorch-lightning · fixed in 2.6.6
- CVE-2026-45804Diffusers: TOCTOU Trust Remote Code BypassPyPI · diffusers · fixed in 0.38.0
- CVE-2026-61740LightRAG: Authentication bypass: hardcoded DEFAULT_TOKEN_SECRET and public /auth-status defeat LIGHTRAG_API_KEY protectionPyPI · lightrag-hku · fixed in 1.5.4
- CVE-2026-61736LightRAG: CORS Wildcard + Credentials Enables Any-Origin Credentialed RequestsPyPI · lightrag-hku · fixed in 1.5.4
- CVE-2026-43637Cornac < 2.6.0 Path Traversal via _extract_archive() in download.pyPyPI · cornac · fixed in 2.6.0
- CVE-2026-61446PraisonAI before 1.6.78 Remote Code Execution via Plugin Auto-DiscoveryPyPI · praisonaiagents · fixed in 1.6.78
- CVE-2026-61443PraisonAI before 1.6.78 Remote Code Execution via SkillToolsPyPI · praisonaiagents · fixed in 1.6.78
- CVE-2026-61440PraisonAI Platform before 0.1.9 Authorization Bypass via Label EndpointsPyPI · praisonai-platform · fixed in 0.1.9
- CVE-2026-61436PraisonAI before 4.6.78 Missing Webhook Signature VerificationPyPI · praisonai · fixed in 4.6.78
- CVE-2026-61435PraisonAI before 4.6.78 Authentication Bypass via Host Header SpoofingPyPI · praisonai · fixed in 4.6.78
- CVE-2026-61433PraisonAI before 4.6.78 Code Injection via API deployment generatorPyPI · praisonai · fixed in 4.6.78
- CVE-2026-61430PraisonAI before 1.6.78 DNS Rebinding SSRF via web_crawlPyPI · praisonaiagents · fixed in 1.6.78
- CVE-2026-61427PraisonAI before 4.6.78 Authentication Bypass via HTTP-streamPyPI · praisonai · fixed in 4.6.78
- CVE-2026-60087PraisonAI before 1.6.78 Tool Approval Cache BypassPyPI · praisonaiagents · fixed in 1.6.78
- CVE-2026-60085PraisonAI before 4.6.78 Unenforced Security Policy in Subprocess SandboxPyPI · praisonai · fixed in 4.6.78
- CVE-2026-56400open-webui - Remote Code Execution via CORS Misconfiguration and Session ValidationPyPI · open-webui · fixed in 0.3.33
- CVE-2026-56398Open WebUI - Stored Cross-Site Scripting via OAuth Picture Claim SVG Data URIPyPI · open-webui · fixed in 0.9.5
- CVE-2025-65720An issue in Open Source GPT Researcher v3.3.7 allows attackers to execute arbitrary commands on a victim system via user interaction with a PyPI · gpt-researcher
- CVE-2026-49476Soup Sieve: Memory Exhaustion via Large Comma-Separated Selector Lists in soupsievePyPI · soupsieve · fixed in 2.8.4
- CVE-2026-49477Soup Sieve: Regular Expression Denial of Service (ReDoS) in soupsieve Selector ParserPyPI · soupsieve · fixed in 2.8.4
- CVE-2026-49855tornado AsyncHTTPClient accumulates decompressed chunks without size limit (gzip bomb)PyPI · tornado · fixed in 6.5.6
- CVE-2026-49854Tornado: Out-of-bounds memory access in C extensionPyPI · tornado · fixed in 6.5.6
- CVE-2026-49853Tornado: Authorization header forwarded across cross-origin redirects in SimpleAsyncHTTPClientPyPI · tornado · fixed in 6.5.6
- CVE-2026-59884pyasn1 BER/CER/DER decoder denial of service via unbounded long-form tag IDsPyPI · pyasn1 · fixed in 0.6.4
- CVE-2026-59885pyasn1: Quadratic complexity in OBJECT IDENTIFIER and RELATIVE-OID processing allows denial of servicePyPI · pyasn1 · fixed in 0.6.4
- CVE-2026-59886pyasn1: Uncontrolled resource consumption when converting decoded REAL valuesPyPI · pyasn1 · fixed in 0.6.4