Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-59924Mistune: Arbitrary File Read via Include directive path traversalPyPI · mistune · fixed in 3.3.0
- CVE-2026-59929Mistune renderers/html.safe_url: HARMFUL_PROTOCOLS list misses legacy and chained schemes that historically chain to `javascript:` executionPyPI · mistune · fixed in 3.3.0
- CVE-2026-59925inline_parser: quadratic-time parsing on long runs of `**x**` and `***x***` emphasis pairsPyPI · mistune · fixed in 3.3.0
- CVE-2026-59926Mistune: XSS via unescaped class option in Admonition directivePyPI · mistune · fixed in 3.3.0
- CVE-2026-59923Mistune: XSS via percent-encoded javascript URI bypass in safe_url()PyPI · mistune · fixed in 3.3.0
- CVE-2026-59930Mistune toc / TableOfContents directive: heading IDs use predictable `toc_N` numbering with no slugification, allowing collision with attacker-controlled `id="toc_N"` contentPyPI · mistune · fixed in 3.3.0
- CVE-2026-59922Mistune plugins/formatting: quadratic-time parsing on long runs of `~~x~~`, `==x==`, and `^^x^^` markers (strikethrough / mark / insert)PyPI · mistune · fixed in 3.3.0
- CVE-2026-59890setuptools: MANIFEST.in exclusion bypass in sdist via Unicode normalization collision (NFC/NFD) on macOS APFS/HFS+PyPI · setuptools · fixed in 83.0.0
- CVE-2026-53951Copier: trust-prefix bypass via path traversal runs tasks unpromptedPyPI · copier · fixed in 9.15.2
- CVE-2026-14967Path traversal in github_workflows allows writing artifacts outside output directoryPyPI · bbot · fixed in 3.0.0
- CVE-2026-14966Symlink guard bypass in unarchive module allows planting symlinks during extractionPyPI · bbot · fixed in 3.0.0
- CVE-2026-15035bentoml OpenLLM Model Repository Directory Name common.py async_run_command command injectionPyPI · bentoml
- CVE-2026-58266Anki: User scripts in iframes have access to the internal Anki APIPyPI · aqt · fixed in 25.9.4
- CVE-2026-59153Anki's local HTTP server does not sufficiently validate requestsPyPI · aqt · fixed in 25.9.3
- CVE-2026-49471Serena: Unauthenticated Flask dashboard on fixed port enables DNS rebinding → memory poisoning → RCEPyPI · serena-agent · fixed in 1.5.2
- CVE-2026-58473Cognee < 1.2.0 Unauthorized LLM Configuration Overwrite via /api/v1/settingsPyPI · cognee · fixed in 1.5.0
- CVE-2026-53878Header injection possibility since DomainNameValidator accepted newlines in inputPyPI · django · fixed in 5.2.16, 6.0.7
- CVE-2026-53877Heap buffer over-read in GDALRasterPyPI · django · fixed in 5.2.16, 6.0.7
- CVE-2026-48588Potential exposure of private data via cached Set-Cookie responsePyPI · django · fixed in 5.2.16, 6.0.7
- CVE-2026-33264Apache Airflow: DAG author RCE on webserver via unrestricted import_string() in BaseSerialization.deserialize()PyPI · apache-airflow, apache-airflow-core · fixed in 3.0.0, 3.3.0
- CVE-2026-49487Apache Airflow: Task-instance API exposes secrets in deferred trigger kwargsPyPI · apache-airflow, apache-airflow-core · fixed in 3.0.0, 3.3.0
- CVE-2026-48828Apache Airflow: Bulk JSON Variables bypass should_hide_value_for_key - redact() called without the keyPyPI · apache-airflow, apache-airflow-core · fixed in 3.0.0, 3.3.0
- CVE-2026-49296Apache Airflow: Per-DAG read bypass discloses co-located DAGs' source via GET /api/v2/dagSources/{dag_id}PyPI · apache-airflow, apache-airflow-core · fixed in 3.3.0
- CVE-2026-48891Apache Airflow: /ui/dependencies scheduling graph leaks unreadable Dag identifiers via trigger/sensor dep.source/dep.targetPyPI · apache-airflow, apache-airflow-core · fixed in 3.0.0, 3.3.0
- CVE-2026-48892Apache Airflow: Config API leaks per-key secrets backend kwargs - masker bypass on synthetic optionsPyPI · apache-airflow, apache-airflow-core · fixed in 3.0.0, 3.3.0
- CVE-2026-57572Crawl4AI: Unauthenticated RCE via Chromium launch-argument injection in browser_config.extra_argsPyPI · crawl4ai · fixed in 0.9.0
- CVE-2026-57573Crawl4AI unauthenticated SSRF in Docker streaming crawl endpointPyPI · crawl4ai · fixed in 0.9.0
- CVE-2026-57571Crawl4AI arbitrary file write via download filename path traversalPyPI · crawl4ai · fixed in 0.9.0
- CVE-2026-55514vLLM denial of service via prompt embeds on M-RoPE modelsPyPI · vllm · fixed in 0.24.0
- CVE-2026-55574vLLM: ReDoS via structured_outputs.regex compiled without timeout in xgrammar and outlines backendsPyPI · vllm · fixed in 0.24.0