Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-54058Pillow: Out-of-bounds read via attacker-controlled row stride on Pillow's mmap path (McIdas AREA files)PyPI · pillow · fixed in 12.3.0
- CVE-2026-59197Pillow: Heap out-of-bounds write in Pillow `ImageFilter.RankFilter` via integer overflow in `ImagingExpand`PyPI · pillow · fixed in 12.3.0
- CVE-2026-59200Pillow: Decompression Bomb DoS via PdfParser.PdfStream.decode()PyPI · pillow · fixed in 12.3.0
- CVE-2026-59198Pillow TGA RLE encoder can serialize up to ~57 KB of adjacent heap data into generated imagesPyPI · pillow · fixed in 12.3.0
- CVE-2026-59205Pillow: Controlled heap out-of-bounds write in `ImageCmsTransform.apply()` via output mode mismatchPyPI · pillow · fixed in 12.3.0
- CVE-2026-59203Pillow EpsImagePlugin negative %%BeginBinary byte count causes infinite loop denial of servicePyPI · pillow · fixed in 12.3.0
- CVE-2026-59199Pillow: Heap out-of-bounds write `Image.paste()` / `Image.crop()` via signed coordinate overflowPyPI · pillow · fixed in 12.3.0
- CVE-2026-59204Pillow JPEG2000 tiled decode retains a growing scratch buffer and can be used for denial of servicePyPI · pillow · fixed in 12.3.0
- CVE-2026-15736Multiple SQL/DDL Injection and Arbitrary File Read Vulnerabilities in snowflake-sqlalchemyPyPI · snowflake-sqlalchemy · fixed in 1.11.0
- CVE-2026-12482Path Traversal via Symlink Name Validation Bypass in keras-team/kerasPyPI · keras · fixed in 3.12.3, 3.15.0
- CVE-2026-62240CrewAI < 1.15.1 SSRF Filter Bypass via HTTP Redirect in Scrape ToolsPyPI · crewai-tools · fixed in 1.15.1
- CVE-2026-41041Apache Gravitino: URL path injection via unencoded user-supplied identifiers in MCP REST client f-string URL construction, enabling path traversal to unintended API endpoints.PyPI · apache-gravitino · fixed in 1.2.1
- CVE-2026-49876Apache Gravitino: Authenticated SSRF in Gravitino JobManager allows server-side HTTP requests to internal network and cloud metadata endpoints via unvalidated job template URIsPyPI · apache-gravitino · fixed in 1.3.0
- CVE-2026-15529yzhao062 pyod persistence.py pyod.utils.persistence.load deserializationPyPI · pyod · fixed in 3.6.2
- CVE-2026-56260Crawl4AI - Arbitrary File Write via output_path ParameterPyPI · crawl4ai · fixed in 0.8.7
- CVE-2026-56259Crawl4AI - LLM Credential Exfiltration via base_url and Environment Variable ResolutionPyPI · crawl4ai · fixed in 0.8.8
- CVE-2026-61447PraisonAI before 1.6.78 Remote Code Execution via CodeAgentPyPI · praisonaiagents · fixed in 1.6.78
- CVE-2026-61445PraisonAI before 4.6.78 Arbitrary File Write and Command ExecutionPyPI · praisonai · fixed in 4.6.78
- CVE-2026-61442PraisonAI Platform before 0.1.9 Authorization Bypass via PATCHPyPI · praisonai-platform · fixed in 0.1.9
- CVE-2026-61439PraisonAI before 4.6.78 Prompt Injection Defense BypassPyPI · praisonai · fixed in 4.6.78
- CVE-2026-61429PraisonAI before 1.6.78 SSRF via Crawl4AI Chromium backendPyPI · praisonaiagents · fixed in 1.6.78
- CVE-2026-61428PraisonAI AgentMail before 4.6.78 Message Injection via WebhookPyPI · praisonai · fixed in 4.6.78
- CVE-2026-60090PraisonAI before 4.6.78 SQL/CQL Injection via vector dimensionPyPI · praisonai · fixed in 4.6.78
- CVE-2026-60088PraisonAI before 4.6.78 Path Traversal via Custom CommandsPyPI · praisonai · fixed in 4.6.78
- CVE-2026-58499Path traversal in EverOS /api/v1/memory/add via unvalidated sender_idPyPI · everos · fixed in 1.0.1
- CVE-2026-61459MCP Server Kubernetes < 3.9.0 Argument Injection via kubectl Structured ToolsPyPI · mcp-server-kubernetes · fixed in 3.9.0
- CVE-2026-59151Prowler: SAML Domain Claiming Enables Cross-Tenant Account TakeoverPyPI · prowler-cloud · fixed in 5.30.3
- CVE-2026-59180Apprise forwards configured auth headers across cross-origin HTTP redirectsPyPI · apprise · fixed in 1.11.0
- CVE-2026-61444PraisonAI before 4.6.78 Code Injection via f-stringPyPI · praisonai · fixed in 4.6.78
- CVE-2026-61441PraisonAI Platform before 0.1.9 Authorization Bypass via DependenciesPyPI · praisonai-platform · fixed in 0.1.9