Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2025-71358picklescan - Remote Code Execution via idlelib.autocomplete.AutoComplete.get_entityPyPI · picklescan · fixed in 0.0.29
- CVE-2025-71344picklescan - Arbitrary Code Execution via Undetected ensurepip._run_pip FunctionPyPI · picklescan · fixed in 0.0.30
- CVE-2025-71339Picklescan - Arbitrary Code Execution via numpy.f2py.crackfortran._eval_length GadgetPyPI · picklescan · fixed in 0.0.33
- CVE-2026-54911UltraJSON: Malformed/Truncated UTF-8 Accepted and Silently Rewritten in ujson.dumps()PyPI · ujson · fixed in 5.13.0
- CVE-2026-49468LiteLLM: Authentication Bypass via Host Header InjectionPyPI · litellm · fixed in 1.84.0
- CVE-2026-41479Authlib OAuth 2.0 authorization endpoint open redirects to attacker-controlled redirect_uri on unsupported response_typePyPI · authlib · fixed in 1.6.10, 1.7.1
- CVE-2026-54651pypdf: Possible infinite loop when processing threads/articles in writerPyPI · pypdf · fixed in 6.13.1
- CVE-2026-49460pypdf: Inefficient decoding of FlateDecode PNG predictor streamsPyPI · pypdf · fixed in 6.12.2
- CVE-2026-49461pypdf: Possible large memory usage for form XObjects during text extractionPyPI · pypdf · fixed in 6.12.2
- CVE-2026-54531pypdf: Possible infinite loop when processing outlines/bookmarks in writerPyPI · pypdf · fixed in 6.13.0
- CVE-2026-54530pypdf: Possible infinite loop when retrieving fonts for layout-mode text extractionPyPI · pypdf · fixed in 6.13.0
- CVE-2026-44727Jupyter Server: Stored XSS in `NbconvertFileHandler` / `NbconvertPostHandler` via missing `sandbox` CSPPyPI · jupyter-server · fixed in 2.20.0
- CVE-2026-54293NLTK: URL-Encoded Path Traversal in nltk.data.load() Allows Arbitrary Local File ReadPyPI · nltk · fixed in 3.10.0
- CVE-2026-55443LangChain: Path traversal and sandbox escape in LangChain file-search middleware and loadersPyPI · langchain, langchain-anthropic · fixed in 1.3.9, 1.4.6
- CVE-2026-53540Python-Multipart: Negative Content-Length in parse_form buffers the entire body in memoryPyPI · python-multipart · fixed in 0.0.31
- CVE-2026-53537Python-Multipart: Content-Disposition parameter smuggling via RFC 2231/5987 extended parametersPyPI · python-multipart · fixed in 0.0.30
- CVE-2026-53538Python-Multipart: Semicolon treated as querystring field separator enables parameter smugglingPyPI · python-multipart · fixed in 0.0.30
- CVE-2026-53539Python-Multipart: Quadratic-time querystring parsing with semicolon separators causes CPU denial of servicePyPI · python-multipart · fixed in 0.0.30
- CVE-2026-54283Starlette: request.form() limits silently ignored for application/x-www-form-urlencoded enable DoSPyPI · starlette · fixed in 1.3.1
- CVE-2026-54282Starlette: Unvalidated request path concatenated into authority poisons request.url.hostnamePyPI · starlette · fixed in 1.3.0
- CVE-2026-54273AIOHTTP: HTTP/1 Pipelined Requests Queue Without LimitPyPI · aiohttp · fixed in 3.14.1
- CVE-2026-54280AIOHTTP: Payload Response Resources Are Not Closed After Mid-Body DisconnectPyPI · aiohttp · fixed in 3.14.1
- CVE-2026-54278AIOHTTP: Unread Compressed Request Bodies Bypass client_max_size During CleanupPyPI · aiohttp · fixed in 3.14.1
- CVE-2026-54277AIOHTTP: C HTTP Parser Bypasses max_line_size for Fragmented LinesPyPI · aiohttp · fixed in 3.14.1
- CVE-2026-54276AIOHTTP: DigestAuthMiddleware Applies Credentials to Cross-Origin Redirect ChallengesPyPI · aiohttp · fixed in 3.14.1
- CVE-2026-54275AIOHTTP: TLS Server Hostname Override Is Ignored When Reusing HTTPS ConnectionsPyPI · aiohttp · fixed in 3.14.1
- CVE-2026-54274AIOHTTP: Incomplete websocket frame payloads bypass memory limitsPyPI · aiohttp · fixed in 3.14.1
- CVE-2026-54279AIOHTTP: Host-Only Cookies Become Domain Cookies After CookieJar PersistencePyPI · aiohttp · fixed in 3.14.1
- CVE-2026-50269AIOHTTP: CRLF injection in multipart headersPyPI · aiohttp · fixed in 3.14.0
- CVE-2026-12479Path Traversal in keras-team/kerasPyPI · keras · fixed in 3.12.3, 3.15.0