Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2025-71342picklescan - Undetected Remote Code Execution via idlelib.run.Executive.runcodePyPI · picklescan · fixed in 0.0.30
- CVE-2026-12252Untrusted JAR Code Execution in Multiple Stanford Interface Classes in nltk/nltkPyPI · nltk · fixed in 3.9.4
- CVE-2026-12481Deserialization of Untrusted Data in keras-team/kerasPyPI · keras · fixed in 3.12.3, 3.15.0
- CVE-2026-52830fast-mcp-telegram: Bearer token path traversal bypasses reserved Telegram session protectionPyPI · fast-mcp-telegram · fixed in 0.19.1
- CVE-2026-58653PraisonAI - Authorization Bypass via Unvalidated project_id in Issue Create/UpdatePyPI · praisonai-platform · fixed in 0.1.8
- CVE-2026-8147Authorization Bypass in mlflow/mlflowPyPI · mlflow · fixed in 3.13.0rc0
- CVE-2026-54263Wagtail: Reflected XSS in dynamic image URL generator viewPyPI · wagtail · fixed in 7.3.3, 7.4.2
- CVE-2026-54262Wagtail: Pages translations can be created without page permissions when using simple_translationPyPI · wagtail · fixed in 7.0.8, 7.3.3, 7.4.2
- CVE-2026-54261Wagtail: Improper permission handling in image previewPyPI · wagtail · fixed in 7.0.8, 7.3.3, 7.4.2
- CVE-2026-54259Wagtail: Improper restriction handling on Documents and Images chosen endpointsPyPI · wagtail · fixed in 7.0.8, 7.3.3, 7.4.2
- CVE-2026-54260Wagtail: Denial of service via unbounded filter specs in the image previewPyPI · wagtail · fixed in 7.0.8, 7.3.3, 7.4.2
- CVE-2026-13769Overly permissive File Permissions in AWS CLIPyPI · awscli · fixed in 1.44.78
- CVE-2026-49119Gradio < 6.16.0 Path Traversal via FileExplorer.preprocess()PyPI · gradio · fixed in 6.16.0
- CVE-2026-12480Arbitrary HDF5 File Read via Virtual Dataset Bypass in keras-team/kerasPyPI · keras · fixed in 3.12.3, 3.15.0
- CVE-2026-57516Ray < 2.56.0 Unsafe Deserialization RCE via WebDataset ReaderPyPI · ray · fixed in 2.56.0
- CVE-2026-56264Crawl4AI - Arbitrary JavaScript Execution via /execute_js EndpointPyPI · crawl4ai · fixed in 0.8.7
- CVE-2025-71374picklescan - Arbitrary Code Execution via Undetected profile.Profile.runPyPI · picklescan · fixed in 0.0.29
- CVE-2025-71371picklescan - Remote Code Execution via code.InteractiveInterpreter Detection BypassPyPI · picklescan · fixed in 0.0.29
- CVE-2025-71368picklescan - Arbitrary Code Execution via Undetected doctest.debug_scriptPyPI · picklescan · fixed in 0.0.30
- CVE-2025-71363picklescan - Arbitrary Code Execution via Undetected cProfile.run in Pickle DeserializationPyPI · picklescan · fixed in 0.0.30
- CVE-2025-71355Picklescan - Arbitrary Code Execution via Unsafe Numpy Function Detection BypassPyPI · picklescan · fixed in 0.0.25
- CVE-2025-71352picklescan - Remote Code Execution via Undetected trace.Trace.runctx in Pickle FilesPyPI · picklescan · fixed in 0.0.29
- CVE-2025-71350picklescan - Undetected Remote Code Execution via torch.utils.collect_env.runPyPI · picklescan · fixed in 0.0.28
- CVE-2025-71349picklescan - Arbitrary Code Execution via Undetected trace.Trace.run in Pickle FilesPyPI · picklescan · fixed in 0.0.29
- CVE-2026-57204pypdf: Missing stream length values ignore defined limitsPyPI · pypdf · fixed in 6.13.3
- CVE-2026-57585MessagePack: Out-of-bounds read/crash on Unpacker reuse after caught errorPyPI · msgpack · fixed in 1.2.1
- CVE-2026-7873Code Injection Vulnerability in Code Validation EndpointPyPI · langflow · fixed in 1.10.1.rc0
- CVE-2026-58168DeepTutor < 1.4.10 - Insecure Default Grants Unrestricted MCP Tool Access to Non-Admin UsersPyPI · deeptutor · fixed in 1.4.10
- CVE-2026-47214Docling: Unsafe URI and Path Handling in HTML BackendPyPI · docling · fixed in 2.94.0
- CVE-2026-44018Docling: Unsafe Archive Extraction and XML Parsing in METS-GBS BackendPyPI · docling · fixed in 2.91.0