Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-6658Cross-site Scripting (XSS) in jupyter/nbconvertPyPI · nbconvert
- CVE-2026-49486Apache Airflow FTP provider: FTP Provider does not protect FTPS data channel (missing PROT_P)PyPI · apache-airflow-providers-ftp · fixed in 3.15.1
- CVE-2025-71340picklescan - Remote Code Execution via idlelib.pyshell.ModifiedInterpreter.runcodePyPI · picklescan · fixed in 0.0.30
- CVE-2026-46608Glances: XML-RPC Multi-Origin CORS Configuration Silently Falls Back to Wildcard (Incomplete Fix for CVE-2026-33533)PyPI · glances · fixed in 4.5.5
- CVE-2026-46607Glances: Insecure Pickle Deserialization in Version Cache Leads to Arbitrary Code ExecutionPyPI · glances · fixed in 4.5.5
- CVE-2026-53925Glances: Arbitrary file write and command execution via `secure_popen` redirection and chaining operators in AMP command configurationPyPI · glances · fixed in 4.5.5
- CVE-2026-46606Glances: Command Injection via KVM/QEMU VM Domain Names in glances/plugins/vms/engines/virsh.pyPyPI · glances · fixed in 4.5.5
- CVE-2026-46611Glances: XML-RPC Server Missing Host Header Validation Enables DNS Rebinding AttackPyPI · glances · fixed in 4.5.5
- CVE-2026-32315motionEye: World-Readable Configuration File Exposes Admin Password HashPyPI · motioneye · fixed in 0.44.0
- CVE-2026-31978motionEye: Arbitrary File Read via Path Traversal in Picture/Movie Preview EndpointPyPI · motioneye · fixed in 0.44.0
- CVE-2026-23879py7zr: Arbitrary File Write VulnerabilityPyPI · py7zr · fixed in 1.1.3
- CVE-2026-44017Docling: Unsafe Zip Extraction in EasyOCR Model DownloadPyPI · docling · fixed in 2.91.0
- CVE-2026-44022Docling: Potential Path Traversal via LaTeX \includegraphics and \input CommandsPyPI · docling · fixed in 2.91.0
- CVE-2026-44020Docling: Unsafe XML Entity Expansion in USPTO Patent BackendPyPI · docling · fixed in 2.74.0
- CVE-2026-44016Docling: Unsafe Playwright-based HTML RenderingPyPI · docling · fixed in 2.91.0
- CVE-2026-49851Mistune: Potential DoS via quadratic-time parsing in parse_link_textPyPI · mistune · fixed in 3.3.0
- CVE-2026-55488motionEye's Absolute Path Traversal in Media File Handlers Allows Arbitrary File ReadPyPI · motioneye · fixed in 0.44.0
- CVE-2026-56121Feast < 0.63.0 Unauthenticated RCE via ApplyFeatureView gRPC DeserializationPyPI · feast · fixed in 0.63.0
- CVE-2026-56262Crawl4AI - Unauthenticated Access to Monitor Endpoints via Docker API ServerPyPI · crawl4ai · fixed in 0.8.7
- CVE-2025-71361picklescan - Remote Code Execution via Undetected idlelib.calltip.Calltip.fetch_tipPyPI · picklescan · fixed in 0.0.29
- CVE-2025-71354picklescan - Remote Code Execution via idlelib.debugobj.ObjectTreeItem.SetTextPyPI · picklescan · fixed in 0.0.29
- CVE-2026-9073Foreman-mcp-server: mcp server: insecure sensitive http header sanitizationPyPI · foreman-mcp-server
- CVE-2026-53753Crawl4AI: AST Sandbox Escape via gi_frame.f_back Chain - Pre-Auth RCE in Docker APIPyPI · crawl4ai · fixed in 0.8.7
- CVE-2026-53754Crawl4AI: SSRF filter bypass in Docker server via IPv6 transition forms (NAT64 / 6to4 / unspecified / v4-mapped)PyPI · crawl4ai · fixed in 0.8.8
- CVE-2026-53755Crawl4AI: SSRF via proxy settings in the Docker server bypasses the crawl-URL SSRF checkPyPI · crawl4ai · fixed in 0.8.9
- CVE-2026-54317Home Assistant: Konnected alarm-panel switch state and zone topology disclosed to unauthenticated actors on the LANPyPI · homeassistant · fixed in 2026.6.0
- CVE-2026-50221In OpenStack Swift before 2.37.2, proxy-server does not strip internal update headers (X-Container-Host, X-Container-Device, X-Delete-At-HosPyPI · swift · fixed in 2.37.2
- CVE-2026-54007Open WebUI: Cross-origin postMessage confirmation bypass via action:submitPyPI · open-webui · fixed in 0.9.6
- CVE-2026-54006Open WebUI: Calendar event re-parenting allows writing events into another user's calendarPyPI · open-webui · fixed in 0.9.6
- CVE-2026-54008Open WebUI: Redirect-Bypass SSRF in OAuth `_process_picture_url`PyPI · open-webui · fixed in 0.9.6