Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-33760Langflow: IDOR/BOLA in Monitor API — Missing Ownership Enforcement on 7 EndpointsPyPI · langflow · fixed in 1.9.0
- CVE-2026-42867Langflow: Path Traversal in Knowledge Bases API via Creation EndpointPyPI · langflow · fixed in 1.9.0
- CVE-2026-55255Langflow: IDOR Vulnerability in `/api/v1/responses` Endpoint Allows Authenticated Attackers to Access Another User's FlowPyPI · langflow · fixed in 1.9.1, 1.9.2
- CVE-2026-55423Langflow: Logout button does not clear sessionPyPI · langflow · fixed in 1.7.0
- CVE-2026-55446Langflow: Unauthenticated DoS through multipart form boundary file uploadPyPI · langflow · fixed in 1.0.19
- CVE-2026-48519Langflow: Unauthenticated RCE in Shareable PlaygroundsPyPI · langflow · fixed in 1.9.2
- CVE-2026-55447Langflow: BaseFileComponent-based nodes arbitrary file read with RCE exploitPyPI · langflow · fixed in 1.9.2
- CVE-2026-55450Langflow: Unauthenticated file upload leads to DoS (space exhaustion) and information leakPyPI · langflow · fixed in 1.9.1
- CVE-2026-50019yt-dlp: File Downloader cookie leak with curlPyPI · yt-dlp · fixed in 2026.6.9
- CVE-2026-50574yt-dlp: Arbitrary code execution via manifest downloads with aria2cPyPI · yt-dlp · fixed in 2026.6.9
- CVE-2026-50023yt-dlp: Dangerous file type creation via insufficient filename sanitization (Bypass of CVE-2024-38519)PyPI · yt-dlp · fixed in 2026.6.9
- CVE-2026-56696OpenHarness - Prompt Injection via /issue and /pr_comments Slash CommandsPyPI · openharness-ai
- CVE-2026-56695OpenHarness - Cross-Session Disclosure via /resume and /summary CommandsPyPI · openharness-ai
- CVE-2026-56315picklescan - Remote Code Execution via Unblocked Standard Library ModulesPyPI · picklescan · fixed in 1.0.4
- CVE-2026-56263Crawl4AI - Stored Cross-Site Scripting in Monitor DashboardPyPI · crawl4ai · fixed in 0.8.7
- CVE-2026-56258Crawl4AI - Arbitrary File Write via output_path Symlink and TOCTOUPyPI · crawl4ai · fixed in 0.8.8
- CVE-2025-71376picklescan - Arbitrary Code Execution via Undetected idlelib.autocomplete.AutoComplete.fetch_completionsPyPI · picklescan · fixed in 0.0.29
- CVE-2025-71370picklescan - Remote Code Execution via torch.jit.unsupported_tensor_ops.execWrapperPyPI · picklescan · fixed in 0.0.28
- CVE-2025-71365picklescan - Arbitrary Code Execution via numpy.f2py.crackfortran.myeval Detection BypassPyPI · picklescan · fixed in 0.0.33
- CVE-2025-71341picklescan - Remote Code Execution via Undetected profile.Profile.runctxPyPI · picklescan · fixed in 0.0.29
- CVE-2026-47155vLLM: Artifact Pin Decay in vLLM allows pinned deployments to load unpinned code, weights, and processorsPyPI · vllm · fixed in 0.22.0
- CVE-2026-41523vLLM: Security Check Bypass via assert Statement in Activation Function Loading Allows Arbitrary Code ExecutionPyPI · vllm · fixed in 0.22.0
- CVE-2026-54232vLLM: Dependency Confusion Vulnerability in vLLM DockerfilePyPI · vllm · fixed in 0.22.1
- CVE-2026-54233vLLM: OOM Denial of Service via Audio Decompression BombPyPI · vllm · fixed in 0.24.0
- CVE-2026-54236vLLM: incomplete CVE-2026-22778 fix leaks PIL repr addresses via Anthropic routerPyPI · vllm · fixed in 0.24.0
- CVE-2026-54235vLLM: temperature=NaN and temperature=Infinity bypass validation and propagate to GPU kernelsPyPI · vllm · fixed in 0.24.0
- CVE-2026-48746vLLM: OpenAI auth bypassPyPI · vllm · fixed in 0.22.0
- CVE-2026-53923vLLM GGUF Kernels: int64_t to int truncation of tensor dimensions causes GPU buffer overflowPyPI · vllm · fixed in 0.24.0
- CVE-2026-44889WebOb: Location header normalization during redirect leads to open redirectPyPI · webob · fixed in 1.8.10
- CVE-2026-56266Crawl4AI - Server-Side Request Forgery via Direct Crawl EndpointsPyPI · crawl4ai · fixed in 0.8.7