Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-48776LangGraph SDK has unsafe URL path constructionPyPI · langgraph, langgraph-sdk · fixed in 0.3.15
- CVE-2026-48775LangGraph Checkpoint: Unsafe JSON deserialization in checkpoint loadingPyPI · langgraph-checkpoint · fixed in 4.1.1
- CVE-2026-12398Galaxy_ng: shell injection in legacy role import via unsanitized git ref namesPyPI · galaxy-ng
- CVE-2026-46448In OpenStack Nova before 33.0.2, the server create API does not strip certain hint data.PyPI · nova · fixed in 31.3.1, 32.2.1, 33.0.2
- CVE-2026-12210universal-tool-calling-protocol python-utcp utcp-gql/utcp-websocket server-side request forgeryPyPI · utcp-gql, utcp-websocket · fixed in 1.1.1
- CVE-2026-54421In OpenStack Ironic before 37.0.1, when applying a PATCH to update fields in volume properties the user is authorized for, Ironic can returnPyPI · ironic · fixed in 29.0.6, 32.0.2, 35.0.2 and more
- CVE-2026-44172MariaDB: mysql_real_escape_string() incorrectly handled big5PyPI · mariadb
- CVE-2026-45833A code injection vulnerability in version 0.4.17 or later of the ChromaDB Python project allows an authenticated attacker to run arbitrary cPyPI · chromadb
- CVE-2026-45831The SimpleRBACAuthorizationProvider authorization provider in versions 0.5.0 or later of the ChromaDB Python project evaluates whether a usePyPI · chromadb
- CVE-2026-45830A lack of authorization validation in version 0.4.17 or later of the ChromaDB Python project allows any authenticated users to arbitrarily rPyPI · chromadb
- CVE-2026-47157aiograpi: Unsafe signup challenge path handlingPyPI · aiograpi · fixed in 0.9.10
- CVE-2026-11816Path Traversal in keras-team/kerasPyPI · keras · fixed in 3.14.0
- CVE-2026-5497Unbounded Frame Count in video/jpeg Base64 Data URL Processing Leads to OOM DoS in vllm-project/vllmPyPI · vllm · fixed in 0.19.0
- CVE-2026-46645SQLAdmin: Authorization Bypass on `ajax_lookup`PyPI · sqladmin · fixed in 0.25.1
- CVE-2026-46695BoxLite: Permission Bypass in boxlite Allows Modification of Read-Only FilesPyPI · boxlite · fixed in 0.9.0
- CVE-2026-46703BoxLite: Path Traversal Vulnerability in boxlite Leads to Arbitrary File Write on the HostPyPI · boxlite · fixed in 0.9.0
- CVE-2026-47213BoxLite: Timeout Bypass VulnerabilityPyPI · boxlite
- CVE-2026-52726Dulwich's submodule path traversal in porcelain.submodule_update / porcelain.clone(recurse_submodules=True) yields RCE via attacker-dropped .git/hooks payloadPyPI · dulwich · fixed in 1.2.5
- CVE-2026-47734Dulwich has unbounded memory allocation in receive-pack from crafted thin packsPyPI · dulwich · fixed in 1.2.5
- CVE-2026-47712Dulwich doesn't sanitize commit subjects in `porcelain.format_patch`PyPI · dulwich · fixed in 1.2.5
- CVE-2026-42305Dulwich has an arbitrary file write via NTFS-hostile tree entries on WindowsPyPI · dulwich · fixed in 1.2.5
- CVE-2026-42563Dulwich Vulnerable to Command Injection via Merge Driver PathPyPI · dulwich · fixed in 1.2.5
- CVE-2026-10143kafka-python prior to 2.3.2 DoS via SCRAM Iteration Count in scram.pyPyPI · kafka-python · fixed in 2.3.2
- CVE-2026-10142kafka-python prior to 2.3.2 Denial of Service via Protocol Parser Frame LengthPyPI · kafka-python · fixed in 2.3.2
- CVE-2026-45106Weblate: Stored HTML injection in editor search previewPyPI · weblate · fixed in 2026.5
- CVE-2026-50127Weblate SSRF: outbound URL guard misses the NAT64 well-known prefix (64:ff9b::/96)PyPI · weblate · fixed in 2026.6
- CVE-2026-46497SSRF via sitemap-derived URLs in Crawlee for PythonPyPI · crawlee · fixed in 1.7.0
- CVE-2026-44716Pipecat: Path Traversal in Pipecat Runner `/files` Endpoint — Arbitrary File Read via `%2F`-Encoded SeparatorPyPI · pipecat-ai · fixed in 1.2.0
- CVE-2026-46517LMDeploy: Hardcoded trust_remote_code=True is an implicit unsafe remote-code load path with no user opt-outPyPI · lmdeploy · fixed in 0.13.0
- CVE-2026-46432LMDeploy: Arbitrary code execution via hardcoded trust_remote_code=True in lmdeploy model initializationPyPI · lmdeploy · fixed in 0.13.0