Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2024-24769Vantage6: No limit on emails sent for password/MFA resetPyPI · vantage6 · fixed in 5.0.0
- CVE-2026-12568Arbitrary File Write in postman_download modulePyPI · bbot · fixed in 2.8.6
- CVE-2026-12567Symlink-following arbitrary write via github_workflows modulePyPI · bbot · fixed in 2.8.5
- CVE-2026-12566SSRF via unvalidated WWW-Authenticate realm in docker_pull modulePyPI · bbot · fixed in 2.8.5
- CVE-2026-12565Path Traversal (Zip-Slip) in unarchive modulePyPI · bbot · fixed in 2.8.5
- CVE-2026-54386marimo < 0.23.9 XSS via file Query Parameter in assets.pyPyPI · marimo · fixed in 0.23.9
- CVE-2026-48990joserfc: b64=false RFC7797 JWS payloads bypass JWSRegistry payload-size limits during deserializationPyPI · joserfc · fixed in 1.6.7
- CVE-2026-12530Improper neutralization of argument delimiters in AWS Bedrock AgentCore Python SDK install_packages()PyPI · bedrock-agentcore · fixed in 1.6.1
- CVE-2026-48989Windows-MCP: HTTP transports expose unauthenticated PowerShell control with wildcard CORSPyPI · windows-mcp · fixed in 0.7.5
- CVE-2026-48817Starlette: Arbitrary HTTP method dispatched to `HTTPEndpoint` attributes via `getattr`PyPI · starlette · fixed in 1.1.0
- CVE-2026-53870Hermes Agent < 0.16.0 - Sensitive File Permission Vulnerability in Store FilesPyPI · hermes-agent · fixed in 0.16.0
- CVE-2026-53869Hermes Agent < 0.16.0 - DNS Rebinding Bypass via WebSocket EndpointsPyPI · hermes-agent · fixed in 0.16.0
- CVE-2026-48818Starlette: SSRF and NTLM credential theft via UNC paths in StaticFiles on WindowsPyPI · starlette · fixed in 1.1.0
- CVE-2026-53875picklescan - Scanning Bypass via Dynamic Eval in scan_pytorchPyPI · picklescan · fixed in 1.0.3
- CVE-2026-53874picklescan - Arbitrary Code Execution via Obfuscated eval CallPyPI · picklescan · fixed in 1.0.1
- CVE-2026-53873picklescan - Arbitrary Code Execution via profile.run() Blocklist BypassPyPI · picklescan · fixed in 1.0.4
- CVE-2026-53872picklescan - Arbitrary File Read via Unsafe Pickle DeserializationPyPI · picklescan · fixed in 0.0.35
- CVE-2026-3490picklescan - Universal Blocklist Bypass via pkgutil.resolve_namePyPI · picklescan · fixed in 1.0.4
- CVE-2025-71325picklescan - Detection Bypass via STACK_GLOBAL Opcode Parsing Logic FlawPyPI · picklescan · fixed in 0.0.27
- CVE-2025-71323picklescan - Remote Code Execution via Unblocked ctypes ModulePyPI · picklescan · fixed in 0.0.33
- CVE-2025-71322PickleScan - Unsafe Globals Check Bypass via pty.spawn FunctionPyPI · picklescan · fixed in 0.0.33
- CVE-2025-71321picklescan - Arbitrary File Writing via distutils Module BypassPyPI · picklescan · fixed in 0.0.33
- CVE-2025-71320picklescan - Remote Code Execution via Incomplete Disallowed InputsPyPI · picklescan · fixed in 0.0.33
- CVE-2026-47103Python StateMachine 3.0.0 < 3.2.0 RCE via SCXML eval() InjectionPyPI · python-statemachine · fixed in 3.2.0
- CVE-2026-55748OpenStack Horizon before 25.7.4 produces scripts for OpenStack RC file downloading that may have a crafted project name with shell metacharaPyPI · horizon
- CVE-2026-12491Vllm: vllm: image exif rotation & png trns transparency not normalized, causing mismatch between model input and expectationsPyPI · vllm · fixed in 0.24.0
- CVE-2026-50203Apache Airflow SFTP provider: Path traversal in SFTPHook.retrieve_directory allows local file write outside the destination directory via malicious server-supplied directory-entry namesPyPI · apache-airflow-providers-sftp · fixed in 5.8.1
- CVE-2025-26240In JazzCore python-pdfkit 1.0.0, the from_string method enables the execution of JavaScript code within the context of the server applicatioPyPI · pdfkit
- CVE-2026-48797Backpropagate: backprop ui --auth and backprop ui --share do not enforce authenticationPyPI · backpropagate · fixed in 1.2.0
- CVE-2026-48782pydantic-ai: SSRF blocklist bypass via IPv4-compatible, SIIT/IVI, and local NAT64 IPv6 addresses (incomplete fix of CVE-2026-46678)PyPI · pydantic-ai, pydantic-ai-slim · fixed in 1.102.0, 2.0.0b3