Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-49017In OpenStack Swift before 2.36.2 and 2.37.2, s3api middleware enters an infinite loop when processing a truncated aws-chunked PUT request boPyPI · swift
- CVE-2026-49014In GDAL 3.1.0 through 3.13.0, scanForGeometryContainers in the netCDF driver allows code execution via a stack-based buffer overflow.PyPI · gdal · fixed in 3.13.1
- CVE-2026-48710Starlette has missing Host header validation that poisons request.url.path, bypassing path-based security checksPyPI · starlette · fixed in 1.0.1
- CVE-2026-44209Banks: Critical Remote Code Execution (RCE) via Jinja2 SSTIPyPI · banks · fixed in 2.4.2
- CVE-2026-44898Mistune TOC Anchor Injection XSSPyPI · mistune · fixed in 3.2.1
- CVE-2026-44897Mistune Heading ID Attribute Injection XSSPyPI · mistune · fixed in 3.2.1
- CVE-2026-44708Mistune Math Plugin XSS Escape BypassPyPI · mistune · fixed in 3.2.1
- CVE-2026-44899Mistune Image Directive CSS Injection VulnerabilityPyPI · mistune · fixed in 3.2.1
- CVE-2026-44896Mistune: XSS via unescaped figclass/figwidth in Figure directivePyPI · mistune · fixed in 3.2.1
- CVE-2026-44844eml_parser: Recursion DoS via nested message/rfc822 attachmentsPyPI · eml-parser · fixed in 3.0.1
- CVE-2026-44843LangChain: Unsafe deserialization of attacker-controlled LangChain objects through overly broad `load()` allowlistsPyPI · langchain-core · fixed in 1.3.3, 0.3.85
- CVE-2026-42448wormhole receive, with --output pointing at an existing directory can be path-traversedPyPI · magic-wormhole · fixed in 0.24.0
- CVE-2026-44730OpenCTI: Privilege escalation via graphQL API abusable by organization admins, due to incorrect ACL on userEdit relationAddPyPI · pycti · fixed in 6.9.7
- CVE-2026-47716Bugsink: Issue bulk actions can affect another project’s issue if its UUID is knownPyPI · bugsink · fixed in 2.2.0
- CVE-2026-47715Bugsink: Issue event views can show an event from another project if its UUID is knownPyPI · bugsink · fixed in 2.2.0
- CVE-2026-47728Bugsink: Project scoping missing in sourcemap and debug-file lookupPyPI · bugsink · fixed in 2.2.0
- CVE-2026-44502Bugsink: SSRF bypass in `validate_webhook_url`PyPI · bugsink · fixed in 2.1.3
- CVE-2026-9540vllm-project vllm OpenAI-compatible Serving Path denial of servicePyPI · vllm
- CVE-2026-46745Apache Airflow FAB provider: LDAP Filter Injection in FAB Auth Manager _search_ldap reachable via /auth/tokenPyPI · apache-airflow-providers-fab · fixed in 3.6.4
- CVE-2026-45361Apache Airflow Google provider: SSH host key verification disabled in ComputeEngineSSHHook (paramiko AutoAddPolicy default)PyPI · apache-airflow-providers-google · fixed in 22.0.0
- CVE-2026-2651Missing Authorization Validation in mlflow/mlflowPyPI · mlflow · fixed in 3.11.0rc0, 3.10.0
- CVE-2026-4372Arbitrary Remote Code Execution via `_attn_implementation_internal` Config Injection in huggingface/transformersPyPI · transformers · fixed in 5.3.0
- CVE-2026-9369NousResearch hermes-agent CLI web-dashboard web_server.py _discover_dashboard_plugins comparisonPyPI · hermes-agent · fixed in 0.15.0
- CVE-2026-9368NousResearch hermes-agent Environment Variable code_execution_tool.py execute_code sandboxPyPI · hermes-agent · fixed in 0.11.0
- CVE-2026-9366NousResearch hermes-agent prompt_builder.py _scan_context_content injectionPyPI · hermes-agent · fixed in 0.15.0
- CVE-2026-9353NousResearch hermes-agent Skills Guard Multi-Word Prompt skills_guard.py injectionPyPI · hermes-agent · fixed in 0.15.0
- CVE-2026-3515Argument Injection in prefecthq/prefectPyPI · prefect
- CVE-2026-40864JupyterHub: Cross-origin form POSTs bypass XSRFPyPI · jupyterhub · fixed in 5.4.5
- CVE-2026-40610BentoML has Information Disclosure in `bentoml build` via symlink traversal in the build contextPyPI · bentoml · fixed in 1.4.39
- CVE-2026-9291Insecure Deserialization in Amazon Braket SDK Job Results ProcessingPyPI · amazon-braket-sdk · fixed in 1.117.0