Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-44797Nautobot: Webhook definitions could be used for server-side request forgery (SSRF)PyPI · nautobot · fixed in 3.1.2, 2.4.33
- CVE-2026-44798Nautobot: GitRepository.current_head field should not be writable through REST APIPyPI · nautobot · fixed in 3.1.2, 2.4.33
- CVE-2026-45078Synapse CPU starvation (Denial of Service)PyPI · matrix-synapse · fixed in 1.152.1
- CVE-2026-45076Synapse pagination denial of servicePyPI · matrix-synapse · fixed in 1.152.1
- CVE-2026-48525PyJWT: Unauthenticated DoS via unbounded Base64URL decoding of unused payload segment in b64=false detached JWSPyPI · pyjwt · fixed in 2.13.0
- CVE-2026-48523PyJWT: Algorithm allow-list bypass when decoding with `PyJWK` / `PyJWKClient` keysPyPI · pyjwt · fixed in 2.12.1, 2.13.0
- CVE-2026-48526PyJWT: Public-key JWK accepted as HMAC secret enables forged HS256 tokens when mixed families are allowedPyPI · pyjwt · fixed in 2.13.0
- CVE-2026-48524PyJWT: PyJWKClient unbounded JWKS endpoint requests via attacker-controlled kid values (DoS)PyPI · pyjwt · fixed in 2.13.0
- CVE-2026-48522PyJWKClient: missing scheme allowlist enables SSRF + token forgery via file://, ftp://, data: schemesPyPI · pyjwt · fixed in 2.13.0
- CVE-2026-48155pypdf: Possible large memory usage for large offsets for layout mode textPyPI · pypdf · fixed in 6.12.0
- CVE-2026-48156pypdf: Possible long runtimes for zero-only width values in cross-reference streamsPyPI · pypdf · fixed in 6.12.0
- CVE-2026-48735pypdf: Manipulated XMP metadata streams can exhaust RAMPyPI · pypdf · fixed in 6.12.1
- CVE-2026-45017Python Liquid: Absolute paths escape filesystem loader search pathPyPI · python-liquid · fixed in 2.2.0
- CVE-2026-42998An issue was discovered in OpenStack Keystone before 29.0.2.PyPI · keystone · fixed in 27.0.2, 28.0.2, 29.0.2
- CVE-2026-42999An issue was discovered in OpenStack Keystone before 29.0.2.PyPI · keystone · fixed in 27.0.2, 28.0.2, 29.0.2
- CVE-2026-43000An issue was discovered in OpenStack Keystone before 29.0.2.PyPI · keystone · fixed in 27.0.2, 28.0.2, 29.0.2
- CVE-2026-44394An issue was discovered in OpenStack Keystone before 29.0.2.PyPI · keystone · fixed in 27.0.2, 28.0.2, 29.0.2
- CVE-2026-44660UltraJSON: Memory Leak in ujson.dump() on Write FailurePyPI · ujson · fixed in 5.12.1
- CVE-2026-45134LangSmith Client SDK: Public prompt pull deserializes untrusted manifests without trust boundary warningPyPI · langchain, langchain-classic +1 · fixed in 0.3.30, 1.0.7, 0.8.0
- CVE-2026-44681Authlib: Open Redirect in Authlib OIDC Implicit/Hybrid AuthorizationPyPI · authlib · fixed in 1.7.1, 1.6.12
- CVE-2026-44345BentoML: Dockerfile command injection via docker.base_imagePyPI · bentoml · fixed in 1.4.39
- CVE-2026-44346BentoML: Dockerfile command injection via envs[*].name in bentofile.yamlPyPI · bentoml · fixed in 1.4.39
- CVE-2026-44353Streamlink: Arbitrary local file read via file:// URI in HLS and DASHPyPI · streamlink · fixed in 8.4.0
- CVE-2026-48545Gradio < 6.15.0 Cookie Injection via Shared Proxy ClientPyPI · gradio · fixed in 6.15.0
- CVE-2026-44971GuardDog: Blind GitHub URL rewrite in remote project scanning causes SSRF and `GH_TOKEN` exfiltrationPyPI · guarddog
- CVE-2026-44972GuardDog: Unsanitized human-readable scan output allows terminal escape injection from malicious package contentPyPI · guarddog
- CVE-2026-48544Taipy 4.1.1 Path Traversal via ElementLibrary.get_resource()PyPI · taipy
- CVE-2026-9712Insecure direct object referencePyPI · pretix · fixed in 2026.4.2
- CVE-2026-23679libusb < 1.0.30 NULL Pointer Dereference in parse_interface()PyPI · libusb · fixed in 1.0.30
- CVE-2026-47104libusb < 1.0.30 Out-of-Bounds Read in parse_iad_array()PyPI · libusb · fixed in 1.0.30