Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-49267Apache Airflow: No certificate validation on SMTP STARTTLS connectionsPyPI · apache-airflow, apache-airflow-core · fixed in 3.0.0, 3.2.2
- CVE-2026-41017Apache Airflow: JWT cookie missing Secure flag in JWTRefreshMiddleware behind HTTPS-terminating proxyPyPI · apache-airflow, apache-airflow-core · fixed in 3.2.2
- CVE-2026-41084Apache Airflow: API authorization bypass: bulk TaskInstances allows cross-DAG mutationPyPI · apache-airflow, apache-airflow-core · fixed in 3.2.2
- CVE-2026-42252Apache Airflow: BashOperator Jinja2 injection via dag_run.conf — low-privilege user patternPyPI · apache-airflow, apache-airflow-core · fixed in 3.2.2
- CVE-2026-42360Apache Airflow: Rendered template truncation bypasses nested sensitive-key maskingPyPI · apache-airflow, apache-airflow-core · fixed in 3.0.0, 3.2.2
- CVE-2026-42358Apache Airflow: Variable masker depth-limit bypass returns cleartext nested secretsPyPI · apache-airflow, apache-airflow-core · fixed in 3.0.0, 3.2.2
- CVE-2026-42359Apache Airflow: Authenticated RCE via XCom PATCH endpoint — XComUpdateBody missing FORBIDDEN_XCOM_KEYS validatorPyPI · apache-airflow, apache-airflow-core · fixed in 3.2.2
- CVE-2026-45360Apache Airflow: Arbitrary import in custom deadline-reference deserializationPyPI · apache-airflow, apache-airflow-core · fixed in 3.0.0, 3.2.2
- CVE-2026-45426Apache Airflow: Log server JWT authorization bypass via Python lstrip() character stripping allows cross-Dag log accessPyPI · apache-airflow, apache-airflow-core · fixed in 3.2.2
- CVE-2026-46764Apache Airflow: Event Log detail endpoint bypasses DAG-scoped event log permission filterPyPI · apache-airflow, apache-airflow-core · fixed in 3.0.0, 3.2.2
- CVE-2026-48726Apache Airflow: revoke_token() unreachable in FabAuthManager / KeycloakAuthManager logout pathPyPI · apache-airflow, apache-airflow-core · fixed in 3.0.0, 3.2.2
- CVE-2026-49298Apache Airflow: JWT Token Exposure in KubernetesExecutor Command-Line ArgumentsPyPI · apache-airflow, apache-airflow-core · fixed in 3.0.0, 3.2.2
- CVE-2026-45192Apache Airflow: Incomplete Redaction of Sensitive Fields in Connection Extra API ResponsePyPI · apache-airflow, apache-airflow-core · fixed in 3.0.0, 3.2.2
- CVE-2026-10224NousResearch hermes-agent Webhook Endpoint feishu.py _handle_webhook_request resource consumptionPyPI · hermes-agent
- CVE-2026-10223NousResearch hermes-agent memory_tool.py _scan_memory_content injectionPyPI · hermes-agent · fixed in 0.15.0
- CVE-2026-10222NousResearch hermes-agent config.py _sanitize_env_lines injectionPyPI · hermes-agent · fixed in 0.18.0
- CVE-2026-10221NousResearch hermes-agent run_agent.py _compress_context injectionPyPI · hermes-agent
- CVE-2026-10212AstrBotDevs AstrBot astr_main_agent.py astr_main_agent authorizationPyPI · astrbot
- CVE-2026-10177Aider-AI Aider AWS EC2 Metadata Endpoint api_docs.py requests.get server-side request forgeryPyPI · aider-chat
- CVE-2026-10175Aider-AI Aider Architect Mode auth.py editor_coder.run code injectionPyPI · aider-chat
- CVE-2026-10108xiaomusic 0.5.7 Path Traversal via GET /music endpointPyPI · xiaomusic · fixed in 0.5.8
- CVE-2026-10105agno 2.6.5 SQL Injection via ClickHouse delete_by_metadata()PyPI · agno
- CVE-2026-49299In OpenStack Neutron before 28.0.1, the tagging controller enforces plural policy action names on single-tag write operations while the defiPyPI · neutron · fixed in 26.0.4, 27.0.3, 28.0.1
- CVE-2026-43979Local Deep Research: HTML Injection via Unescaped User Input in PDF Export (`pdf_service.py:_markdown_to_html`)PyPI · local-deep-research · fixed in 1.6.0
- CVE-2026-46526Local Deep Research: SSRF bypass in `safe_get`PyPI · local-deep-research · fixed in 1.6.10
- CVE-2026-45306pyLoad: Incomplete Fix for CVE-2026-33509 -storage_folder Bypass via Session DirectoryPyPI · pyload-ng
- CVE-2026-45348pyLoad: Stored XSS in Downloads view via unsanitized link URL in packages.js template literalPyPI · pyload-ng
- CVE-2026-46561pyLoad: SSRF via HTTP Redirect Bypass in parse_urls APIPyPI · pyload-ng · fixed in 0.5.0b3.dev100
- CVE-2026-44794Nautobot: REST API permits creation of GenericForeignKey references to objects that the user should not be able to referencePyPI · nautobot · fixed in 2.4.33, 3.1.2
- CVE-2026-44796Nautobot: Object bulk rename UI actions vulnerable to denial of service by crafted regular expression (REDoS)PyPI · nautobot · fixed in 3.1.2, 2.4.33