Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-115919ONNX: Out-of-Bounds Read in RNN/GRU/LSTM Shape Inference (Old Opsets, Missing Rank Check)PyPI · onnx · fixed in 1.22.0
- CVE-2026-115918vLLM: Responses API bypasses trust_request_chat_template for chat_template_kwargsPyPI · vllm · fixed in 0.32.0
- CVE-2026-115917vLLM: Permissive default CORS origins allow cross-origin requests to the vLLM HTTP serverPyPI · vllm · fixed in 0.32.0
- CVE-2026-115916vLLM: Out-of-vocabulary prompt token id passes input validation and triggers a CUDA device-side assert (engine crash / DoS)PyPI · vllm · fixed in 0.32.0
- CVE-2026-115915vLLM: Untrusted EPS inputs can trigger denial of service or Ghostscript RCEPyPI · vllm · fixed in 0.32.0
- CVE-2026-115914vLLM DeepSeek-OCR image processing vulnerable to denial of servicePyPI · vllm · fixed in 0.32.0
- CVE-2026-115913vLLM: Phi-4 multimodal audio encoder materializes and retains full attention matrices: a single max-length audio OOM-crashes the vLLM enginePyPI · vllm · fixed in 0.32.0
- CVE-2026-115912vLLM: Public multimodal SHM handle forgery reaches worker-side `pickle.loads()` with insecure serialization disabledPyPI · vllm · fixed in 0.32.0
- CVE-2026-115911vLLM: DoS via unbounded chat_template Jinja2 rendering exhausts the renderer thread poolPyPI · vllm · fixed in 0.32.0
- CVE-2026-115910Python Social Auth: OpenID Connect nonce is not bound to the browser session, so a stolen authorization code logs the attacker in as the…PyPI · social-auth-core · fixed in 6.2.0
- CVE-2026-116178vLLM 0.20.0 before 0.30.0 DoS via /inference/v1/generate mm_placeholdersPyPI · vllm · fixed in 0.30.0
- CVE-2026-116177vLLM 0.10.2 before 0.25.0 DoS via Nemotron-VL Processor Decompression-Bomb Guard BypassPyPI · vllm · fixed in 0.25.0
- CVE-2026-116176vLLM 0.9.2 before 0.24.0 SSRF via X-Request-Id in P2pNcclConnectorPyPI · vllm · fixed in 0.24.0
- CVE-2026-116173vLLM 0.22.0 before 0.24.0 Denial of Service via gRPC output_candidates.token_idsPyPI · vllm · fixed in 0.24.0
- GHSA-XMJ3-9GF7-H52Wsetuptools: Windows path escape via namespace_packages.txt during legacy wheel installation DescriptionPyPI · setuptools · fixed in 84.1.0
- GHSA-7XGJ-8392-5Q4RFastMCP: Post-transform component authorization is skipped on direct callsPyPI · fastmcp, fastmcp-slim · fixed in 3.4.10, 4.1.2
- GHSA-VQQP-X5QM-5QP4FastMCP MCP client wrappers construct M2M OAuth providers without issuer binding — client secret redirectable to attacker-advertised authoriPyPI · fastmcp, fastmcp-slim · fixed in 4.1.2
- CVE-2026-115886MLflow: SSRF on unauthenticated MLflow servers via third-party scorer kwargs in the scorer invoke, register, and GenAI evaluate endpointsPyPI · mlflow · fixed in 3.17.0
- CVE-2026-115885LangGraph CLI prints the registry push token in `langgraph deploy --verbose` outputPyPI · langgraph-cli · fixed in 0.4.32
- CVE-2026-115883LangGraph: Namespace labels containing `.` reach other namespaces in Postgres and SQLite storesPyPI · langgraph-checkpoint-postgres, langgraph-checkpoint-sqlite · fixed in 3.1.3, 3.1.2
- CVE-2026-115877Twisted: HTTP Request Smuggling in twisted.web via a Bare CR or LF in a Header ValuePyPI · twisted · fixed in 26.10.0rc1
- CVE-2026-83813Twisted: DNS Response Spoofing in twisted.names Due to Missing Source Address ValidationPyPI · twisted · fixed in 26.10.0rc1
- CVE-2026-115778Twisted: Unauthenticated Remote Denial of Service in the Twisted conch Telnet Transport via an Unbounded Subnegotiation BufferPyPI · twisted · fixed in 26.10.0rc1
- CVE-2026-115776Twisted: Unauthenticated Remote Denial of Service in the Twisted IRC Server via an Unbounded Line BufferPyPI · twisted · fixed in 26.10.0rc1
- CVE-2026-115775Twisted: Unauthenticated Remote Denial of Service in the Twisted words domish XML Element Stream via an Unbounded Element TreePyPI · twisted · fixed in 26.10.0rc1
- CVE-2026-115774Twisted: Denial of Service in the Twisted IMAP4 Server via a Negative Literal Size in SEARCHPyPI · twisted · fixed in 26.10.0rc1
- CVE-2026-115586virtualenv: Bash activator leaves the --prompt value unescaped in PS1 when promptvars is off, so prompt expansion later executes it (regression in 21.14.9)PyPI · virtualenv · fixed in 21.14.13
- CVE-2026-115585pypdf: Possible long runtimes for repeated malformed cross-reference entries (Follow-up)PyPI · pypdf · fixed in 6.21.2
- CVE-2026-115580pypdf: Possible long runtimes for large xref table header limitsPyPI · pypdf · fixed in 6.21.2
- CVE-2026-115572pypdf: Possible long runtimes for repeated references to the same missing objectPyPI · pypdf · fixed in 6.21.2