Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-59177ESPHome Device Builder allows unauthenticated dashboard access via the HA add-on ingress site bound to all interfacesPyPI · esphome-device-builder · fixed in 1.0.10
- CVE-2026-101272Incorrect session validation for API-created shredder exportsPyPI · pretix · fixed in 2026.6.4, 2026.7.3, 2026.8.1
- CVE-2026-101274When pretix is used as the identity provider in a Single-Sign-On (SSO) setup for customer accounts, the system did not properly validate…PyPI · pretix · fixed in 2026.6.4, 2026.7.3, 2026.8.1
- CVE-2026-101273Giftcard enumerationPyPI · pretix · fixed in 2026.6.4, 2026.7.3, 2026.8.1
- CVE-2026-116694OpenTelemetry Python: Unbounded memory allocation in Jaeger baggage propagationPyPI · opentelemetry-propagator-jaeger · fixed in 1.45.0
- CVE-2026-116692MLflow: Remote code execution on unauthenticated MLflow servers via third-party scorer deserialization importing caller-placed artifact…PyPI · mlflow · fixed in 3.17.0
- CVE-2026-116691MLflow CrewAI autologging records LLM provider API keys in logged trace spansPyPI · mlflow · fixed in 3.17.0
- CVE-2026-116690MLflow: Arbitrary file read on unauthenticated MLflow servers via prompt model version sourcePyPI · mlflow · fixed in 3.17.0
- CVE-2026-116686Model Context Protocol Python SDK: Client fetched server-chosen $ref URLs while validating tool results against output schemasPyPI · mcp · fixed in 2.2.0, 1.30.0
- CVE-2026-116685Model Context Protocol Python SDK: HTTP client transports followed cross-origin redirects carrying custom headers and bodiesPyPI · mcp · fixed in 2.2.0, 1.30.0
- CVE-2026-116684Model Context Protocol Python SDK: Server bearer-token authentication accepts tokens issued for a different resource serverPyPI · mcp · fixed in 2.2.0, 1.30.0
- CVE-2026-116677OpenWISP Controller CA CRL REST API does not scope requests to managed organizationsPyPI · openwisp-controller · fixed in 1.3.2
- GHSA-WF6J-7HVR-GR93Hydra legacy target blacklist permits unsafe PyYAML loadingPyPI · hydra-core · fixed in 1.3.8, 1.4.0rc3
- CVE-2026-116672Authlib RFC 7592 examples omit registration-access-token client bindingPyPI · authlib · fixed in 1.9.1
- GHSA-3W55-933P-8PV5Strands Agents: Local Privilege Escalation via Symlink Attack in Default Session File StoragePyPI · strands-agents · fixed in 1.48.0
- GHSA-763V-5PJM-FX36Strands Agents: Default FileSessionManager storage is world-readable on shared systemsPyPI · strands-agents · fixed in 1.48.0
- GHSA-G5FF-637F-6Q2MLiteLLM: internal_user_viewer arbitrary local file read via `vertex_ai_credentials`PyPI · litellm · fixed in 1.95.0
- GHSA-HHWW-MRG2-969HLiteLLM vulnerable to reflected XSS in /sso/debug/callbackPyPI · litellm · fixed in 1.85.0
- CVE-2026-117601Electrum before 4.8.3 Missing Signature Verification of Mempool TransactionsPyPI · electrum · fixed in 4.8.3
- CVE-2026-116589Datadog dd-trace-py: IAST instrumentation can lead to application DOSPyPI · ddtrace · fixed in 4.15.5
- CVE-2026-116588Datadog dd-trace-py: ReDOS in URL query string obfuscationPyPI · ddtrace · fixed in 3.19.9, 4.15.6
- CVE-2026-116579Autobahn Python: permessage-brotli inflates a whole frame before maxMessagePayloadSize is checked (incomplete fix of GHSA-hxp9-w8x3-p566)PyPI · autobahn · fixed in 26.10.1
- CVE-2026-116578Tornado: Open redirect in RedirectHandler via protocol-relative URLsPyPI · tornado · fixed in 6.6
- CVE-2026-116577Tornado: Quadratic CPU usage when parsing HTTP headers with line foldingPyPI · tornado · fixed in 6.6
- CVE-2026-116575Mem0: Cross-tenant conversation leak via unescaped delimiter collision in session-scope key (_build_session_scope)PyPI · mem0ai · fixed in 2.0.18
- CVE-2026-115927Tornado: Event loop blocking and excess memory use from chunked bodies with many small chunksPyPI · tornado · fixed in 6.6
- CVE-2026-115924Rembg: Unauthenticated SAM model injection permits local-file disclosure through malicious ONNX graphsPyPI · rembg · fixed in 2.0.82
- CVE-2026-115922ONNX: Denial of service via unchecked expansion of packed sub-byte tensors in ONNX Python APIsPyPI · onnx · fixed in 1.22.0
- CVE-2026-115921ONNX: Null Pointer Dereference in ScanInferenceFunction Due to Missing Required AttributePyPI · onnx · fixed in 1.22.0
- CVE-2026-115920ONNX: Out-of-bounds read in ConvTranspose shape inference via undersized weight rankPyPI · onnx · fixed in 1.22.0