Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-59220Open WebUI: ReDoS in skill-mention regexes causes whole-instance DoS on default configPyPI · open-webui · fixed in 0.10.0
- CVE-2026-59226Open WebUI: Scheduled automations continue after pending-user deactivation and stored model ACL revocationPyPI · open-webui · fixed in 0.10.0
- CVE-2026-59227Open WebUI: POST /api/v1/images/edit bypasses the global image-edit switch and the per-user image-generation permissionPyPI · open-webui · fixed in 0.10.0
- CVE-2026-59218Open WebUI: Account enumeration via observable login timing discrepancyPyPI · open-webui · fixed in 0.10.0
- CVE-2026-59214Open WebUI: Stored web worker XSS via PyodidePyPI · open-webui · fixed in 0.10.0
- CVE-2026-54499Stanza: Remote Code Execution via Unsafe Pickle Deserialization in Model LoadersPyPI · stanza · fixed in 1.12.2
- CVE-2026-55830RestrictedPython guard hooks can be shadowed via positional-only argumentsPyPI · restrictedpython · fixed in 8.3
- CVE-2026-35211OpenCTI: Elasticsearch Painless Script Injection via GraphQL `script` filter operator allows authenticated user to exfiltrate data and cause DoSPyPI · pycti · fixed in 7.260401.0
- CVE-2026-35210OpenCTI: Authorization Bypass via `synchronized-upsert` HTTP Header InjectionPyPI · pycti · fixed in 7.260326.0
- CVE-2026-54528jupyterlab-git excluded_paths Case-Sensitivity Bypass Allows Reading Excluded DirectoriesPyPI · jupyterlab-git · fixed in 0.54.0
- CVE-2026-54527JupyterLab Git: Stored XSS leading to RCEPyPI · jupyterlab-git, jupyterlab-git-core · fixed in 0.54.0
- CVE-2026-54590AsyncSSH AuthorizedKeysFile username substitution bypass through ~ and environment expansionPyPI · asyncssh · fixed in 2.23.1
- CVE-2026-54591AsyncSSH: SCP Path Traversal to Arbitrary File WritePyPI · asyncssh · fixed in 2.23.1
- CVE-2026-55206py7zr: O(n^2) algorithmic complexity DoS in PackInfo._read()PyPI · py7zr · fixed in 1.1.3
- CVE-2026-55195py7zr: Decompression bomb (zip bomb) denial of service via unchecked extraction sizePyPI · py7zr · fixed in 1.1.3
- GHSA-MXWC-WH95-PW4GTrapster Community: Unauthenticated malformed DNS compression pointers crash per-packet honeypot handlerPyPI · trapster · fixed in 1.2.2
- CVE-2026-55404yt-dlp: Downstream command injection via improper sanitization of yt-dlp --write-link outputPyPI · yt-dlp · fixed in 2026.7.4
- CVE-2026-59936pypdf: Possible infinite loop for not terminated inline imagesPyPI · pypdf · fixed in 6.14.1
- CVE-2026-59935pypdf: Possible infinite loop for not terminated inline images (ASCII85 and ASCIIHex filter)PyPI · pypdf · fixed in 6.14.2
- CVE-2026-59939httplib2: Decompression Bomb Denial of Service via Unbounded gzip/deflate Response HandlingPyPI · httplib2 · fixed in 0.32.0
- CVE-2026-59819LiteLLM: Local file read via request-supplied OIDC file referencesPyPI · litellm · fixed in 1.83.10
- CVE-2026-59822LiteLLM: MCP Authentication Bypass via OAuth2 Passthrough FallbackPyPI · litellm · fixed in 1.84.0
- CVE-2026-59820LiteLLM: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')PyPI · litellm · fixed in 1.83.7
- CVE-2026-44512ONNX: Null Pointer Dereference in Upsample Version Converter Adapter (Zero Inputs)PyPI · onnx · fixed in 1.22.0
- CVE-2026-58501Zeep SSRF because Settings.forbid_external is not enforcedPyPI · zeep · fixed in 4.3.3
- CVE-2026-59821LiteLLM: Custom Code Guardrails production endpoints bypass code safety checksPyPI · litellm · fixed in 1.82.0
- CVE-2026-59937pypdf: Possible long runtimes for repeated malformed cross-reference entriesPyPI · pypdf · fixed in 6.14.0
- CVE-2026-59938pypdf: Possible large memory usage for wrong image dimensionsPyPI · pypdf · fixed in 6.14.0
- CVE-2026-59927Mistune directives/include: mutual `.. include::` recursion crashes the renderer with `RecursionError`, denial of service via two attacker-controlled markdown filesPyPI · mistune · fixed in 3.3.0
- CVE-2026-59928Mistune block_parser: quadratic-time parsing on long lists of repeated reference-link definitionsPyPI · mistune · fixed in 3.3.0