Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-54234vLLM: Remote DoS in vLLM via Invalid Recovered Token ReinjectionPyPI · vllm · fixed in 0.24.0
- CVE-2026-55646vLLM speech-to-text endpoints allocate full upload before enforcing the audio file-size limitPyPI · vllm · fixed in 0.24.0
- CVE-2026-55379Pillow BdfFontFile`: `Image.new()` called without `_decompression_bomb_check()` — bomb protection bypass via font loadingPyPI · pillow · fixed in 12.3.0
- CVE-2026-55380Pillow GdImageFile decompression bomb protection bypassPyPI · pillow · fixed in 12.3.0
- CVE-2026-54060Pillow: `FontFile.compile()`: `Image.new()` called without `_decompression_bomb_check()`PyPI · pillow · fixed in 12.3.0
- CVE-2026-54059Pillow: PcfFontFile._load_bitmaps()`: `Image.frombytes()` called without `_decompression_bomb_check()` — bomb protection bypass via PCF font loadingPyPI · pillow · fixed in 12.3.0
- CVE-2026-55798Pillow: WindowsViewer.get_command() OS command injection via unescaped shell pathPyPI · pillow · fixed in 12.3.0
- CVE-2026-59152Arbitrary server-side file read in LangSmith SDK TracingMiddlewarePyPI · langsmith · fixed in 0.8.18
- CVE-2026-58203NestedSecretsSettingsSource follows symlinks outside secrets_dir, enabling local file read and bypassing secrets_dir_max_sizePyPI · pydantic-settings · fixed in 2.14.2
- CVE-2026-49297Apache Airflow Google provider: Path traversal via GCS object names → local/SFTP filesystem (GCSToSFTPOperator + GCSTimeSpanFileTransformOperator)PyPI · apache-airflow-providers-google · fixed in 22.2.1
- CVE-2026-24013Apache IoTDB: Authentication Bypass via Forged SessionID in Thrift RPCPyPI · apache-iotdb · fixed in 2.0.8
- CVE-2026-24012Apache IoTDB: Denial of Service via Resource Exhaustion in Aggregation QueryPyPI · apache-iotdb · fixed in 2.0.8
- CVE-2026-24014Apache IoTDB: Path Traversal in DataNode Internal RPC Trigger JAR Upload Allows Arbitrary File WritePyPI · apache-iotdb · fixed in 2.0.8
- CVE-2026-14535Fickling MLAllowlist analysis pass rendered inoperative by shared mutable state in AnalysisContext.shorten_code()PyPI · fickling · fixed in 0.1.12
- CVE-2026-14534Fickling check_safety() bypass via unlisted standard library modules (_posixsubprocess, site, atexit)PyPI · fickling · fixed in 0.1.11
- CVE-2025-71375picklescan - Undetected Remote Code Execution via _operator.methodcallerPyPI · picklescan · fixed in 0.0.34
- CVE-2025-71373picklescan - Remote Code Execution via operator.methodcaller Detection BypassPyPI · picklescan · fixed in 0.0.33
- CVE-2025-71372Picklescan - Arbitrary Code Execution via numpy.f2py.crackfortran.getlincoef GadgetPyPI · picklescan · fixed in 0.0.33
- CVE-2025-71369picklescan - Unsafe Deserialization via torch.utils.data.datapipes.utils.decoder.basichandlersPyPI · picklescan · fixed in 0.0.28
- CVE-2025-71367picklescan - Remote Code Execution via _operator.attrgetter Detection BypassPyPI · picklescan · fixed in 0.0.34
- CVE-2025-71366picklescan - Arbitrary Code Execution via torch.utils.bottleneck.__main__.run_cprofilePyPI · picklescan · fixed in 0.0.28
- CVE-2025-71364picklescan - Arbitrary Code Execution via Undetected asyncio.unix_events._UnixSubprocessTransport._startPyPI · picklescan · fixed in 0.0.30
- CVE-2025-71362picklescan - Arbitrary Code Execution via Unsafe Deserialization in numpy.f2py.crackfortranPyPI · picklescan · fixed in 0.0.33
- CVE-2025-71360picklescan - Remote Code Execution via Undetected idlelib.calltip.get_entityPyPI · picklescan · fixed in 0.0.29
- CVE-2025-71359picklescan - Unsafe Deserialization via lib2to3.pgen2.grammar.Grammar.loadsPyPI · picklescan · fixed in 0.0.29
- CVE-2025-71356picklescan - Arbitrary Code Execution via torch.fx.experimental.symbolic_shapes.ShapeEnv.evaluate_guards_expressionPyPI · picklescan · fixed in 0.0.28
- CVE-2025-71353picklescan - Remote Code Execution via torch._dynamo.guards.GuardBuilder.getPyPI · picklescan · fixed in 0.0.28
- CVE-2025-71347picklescan - Undetected Remote Code Execution via numpy.f2py.crackfortran.param_evalPyPI · picklescan · fixed in 0.0.33
- CVE-2025-71345picklescan - Arbitrary Code Execution via torch.utils.bottleneck.__main__.run_autograd_profPyPI · picklescan · fixed in 0.0.30
- CVE-2025-71343picklescan - Arbitrary Code Execution via lib2to3.pgen2.pgen.ParserGenerator.make_label Detection BypassPyPI · picklescan · fixed in 0.0.30