Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-44546Header injection via WebSocket upgrade parser differential allows ASGI scope header spoofingPyPI · daphne · fixed in 4.2.2
- CVE-2026-44545Unbounded WebSocket message and frame sizes can cause unauthenticated remote denial of servicePyPI · daphne · fixed in 4.2.2
- CVE-2026-48587Potential exposure of private data via whitespace padding in Vary headerPyPI · django · fixed in 5.2.15, 6.0.6
- CVE-2026-35193Potential exposure of private data via missing Vary: Authorization in UpdateCacheMiddlewarePyPI · django · fixed in 5.2.15, 6.0.6
- CVE-2026-8404Potential exposure of private data via case-sensitive Cache-Control directives in UpdateCacheMiddlewarePyPI · django · fixed in 5.2.15, 6.0.6
- CVE-2026-7666Potential unencrypted email transmission via STARTTLS in the SMTP backendPyPI · django · fixed in 5.2.15, 6.0.6
- CVE-2026-6873Signed cookie salt namespace collision in django.http.HttpRequest.get_signed_cookiePyPI · django · fixed in 5.2.15, 6.0.6
- CVE-2026-5241Policy Bypass in LightGlue Nested Config Resolution in huggingface/transformersPyPI · transformers · fixed in 5.5.0
- CVE-2026-4035Environment Variable Resolution Vulnerability in mlflow/mlflowPyPI · mlflow · fixed in 3.11.0
- CVE-2026-46447OpenStack Ironic before 35.0.2 allows Boot Script Injection of an iPXE script if the attacker can set node.driver_info or node.instance_infoPyPI · ironic · fixed in 26.1.7, 29.0.6, 32.0.2 and more
- CVE-2026-10692johnhuang316 code-index-mcp search_code_advanced is_safe_regex_pattern redosPyPI · code-index-mcp · fixed in 2.14.1
- CVE-2026-35212OpenCTI has XSS in the rendering of email-message observable body dataPyPI · pycti · fixed in 7.260227.0
- CVE-2026-47265AIOHTTP vulnerable to cross-origin redirect with per-request cookiesPyPI · aiohttp · fixed in 3.14.0
- CVE-2026-34993AIOHTTP Vulnerable to Deserialization of Untrusted DataPyPI · aiohttp · fixed in 3.14.0
- CVE-2026-45554NiceGUI: Unauthenticated log-flood DoS via trailing slash on ESM and per-component resource routesPyPI · nicegui · fixed in 3.12.0
- CVE-2026-45553NiceGUI: Local file disclosure via Docutils file insertion in ui.restructured_text()PyPI · nicegui · fixed in 3.12.0
- CVE-2026-47117OpenMed < 1.5.2 Remote Code Execution via PII Model LoadingPyPI · openmed · fixed in 1.5.2
- CVE-2026-5422Path Traversal in jupyter/jupyterPyPI · jupyter-server · fixed in 2.18.2
- CVE-2026-3514Authentication Bypass in prefecthq/prefectPyPI · prefect · fixed in 3.6.22.dev7, 3.6.22
- CVE-2026-3198Improper Access Control in mlflow/mlflowPyPI · mlflow · fixed in 3.11.0rc0
- CVE-2026-10566FoundationAgents MetaGPT schema.py Message.check_instruct_content deserializationPyPI · metagpt
- CVE-2026-10300SGLang Inference HTTP Endpoint lora_manager.py assertionPyPI · sglang
- CVE-2026-25879Langroid has Prompt to SQL Injection, Leading to RCEPyPI · langroid · fixed in 0.63.0
- CVE-2026-49138Nanobot < 0.2.1 SSRF via web_fetch Tool Redirect FollowingPyPI · nanobot-ai · fixed in 0.2.1
- CVE-2026-45727CloakBrowser: Unauthenticated path traversal via fingerprint parameter in cloakserve leads to arbitrary directory deletionPyPI · cloakbrowser · fixed in 0.3.28
- CVE-2026-8643pip can extract console_scripts and gui_scripts outside installation directoryPyPI · pip · fixed in 26.1.2
- CVE-2026-40861Apache Airflow: Arbitrary File Read via Log Symlink following in FileTaskHandlerPyPI · apache-airflow, apache-airflow-core · fixed in 3.0.0, 3.2.2
- CVE-2026-40961Apache Airflow: Open Redirect Bypass VulnerabilityPyPI · apache-airflow, apache-airflow-core · fixed in 3.2.2
- CVE-2026-40963Apache Airflow: DAG authorization bypass on /ui/structure/structure_dataPyPI · apache-airflow, apache-airflow-core · fixed in 3.2.2
- CVE-2026-41014Apache Airflow: per-DAG RBAC bypass on /ui/partitioned_dag_runs endpointsPyPI · apache-airflow, apache-airflow-core · fixed in 3.2.2