Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-47102LiteLLM < 1.83.10 Privilege Escalation via User UpdatePyPI · litellm · fixed in 1.83.10
- CVE-2026-47101LiteLLM < 1.83.14 Privilege Escalation via API Key GenerationPyPI · litellm · fixed in 1.83.14
- CVE-2026-48207Apache Fory: PyFory ReduceSerializer Incomplete Policy EnforcementPyPI · pyfory · fixed in 1.0.0
- CVE-2026-2734Authorization Bypass in SearchModelVersions in mlflow/mlflowPyPI · mlflow · fixed in 3.10.0
- CVE-2026-27173Apache Airflow CNCF Kubernetes provider: JWT Token Exposure in KubernetesExecutor Command-Line ArgumentsPyPI · apache-airflow-providers-cncf-kubernetes · fixed in 10.17.0
- CVE-2026-42526Apache Airflow Amazon provider: Prevent unauthorized access to team-scoped secrets in AWS Secrets Manager and SSM Parameter Store backendsPyPI · apache-airflow-providers-amazon · fixed in 9.28.0
- CVE-2026-2611Improper Origin Validation in mlflow/mlflowPyPI · mlflow · fixed in 3.10.0
- CVE-2025-51427An issue was discovered in ModelScope 1.25.0 allowing attackers to execute arbitrary code via crafted module listed in the configuration filPyPI · modelscope · fixed in 1.27.0
- CVE-2026-31072The JSONSerializer and CBORSerializer in APScheduler (all versions including 3.10.x and 4.0.0a5) are vulnerable to Remote Code Execution (RCPyPI · apscheduler
- CVE-2026-4137Incomplete Fix for CVE-2025-10279: Insecure Temporary Directory Permissions in mlflow/mlflowPyPI · mlflow · fixed in 3.11.0
- CVE-2026-8838Remote Code Execution via eval() Injection in amazon-redshift-python-driverPyPI · redshift-connector · fixed in 2.1.14
- CVE-2026-45829A pre-authentication, code injection vulnerability in version 1.0.0 or later of the ChromaDB Python project allows an unauthenticated attackPyPI · chromadb
- CVE-2026-7304CVE-2026-7304PyPI · sglang
- CVE-2026-7302CVE-2026-7302PyPI · sglang
- CVE-2026-7301CVE-2026-7301PyPI · sglang
- CVE-2026-8754AstrBotDevs AstrBot File Upload chat.py post_file path traversalPyPI · astrbot · fixed in 4.23.6
- CVE-2026-45338Open WebUI: SSRF via OAuth Profile Picture URL in _process_picture_url (oauth.py)PyPI · open-webui · fixed in 0.9.0
- CVE-2026-44549Open WebUI: Stored XSS in excel file previewPyPI · open-webui · fixed in 0.8.0
- CVE-2026-45299Open WebUI: Stored Cross-Site Scripting In Profile PicturePyPI · open-webui · fixed in 0.8.0
- CVE-2026-45667Open WebUI: Unauthenticated endpoint can trigger embedding generation (cost/DoS)PyPI · open-webui · fixed in 0.8.0
- CVE-2026-44565Open WebUI: Open WebUI Arbitrary File Write, Delete via Path TraversalPyPI · open-webui · fixed in 0.6.10
- CVE-2026-45314Open WebUI: XSS via SVG in /api/v1/channels/webhooks/{webhook_id}/profile/imagePyPI · open-webui · fixed in 0.9.3
- CVE-2026-45316Open WebUI: Read-Only Users Can Toggle Note Pin Status via Incorrect Permission Check (Write via Read-Only Access)PyPI · open-webui · fixed in 0.9.3
- CVE-2026-45317Open WebUI: Cross-Site Request Forgery (CSRF) via Image URL ManipulationPyPI · open-webui · fixed in 0.9.3
- CVE-2026-45318Open WebUI: Stored XSS via unsanitized Office/Excel/DOCX file preview rendering ({@html} without DOMPurify)PyPI · open-webui · fixed in 0.9.3
- CVE-2026-45315Open WebUI: Stored XSS via attacker-controlled file extension in /api/v1/audio/transcriptionsPyPI · open-webui · fixed in 0.9.3
- CVE-2026-44571Open WebUI: Improper Authorization in Standard Channels Allows Message Updates with Read PermissionPyPI · open-webui · fixed in 0.8.6
- CVE-2026-45350Open WebUI: Chat completion API allows tool restrictions to be bypassedPyPI · open-webui · fixed in 0.8.6
- CVE-2026-45303Open WebUI: Stored XSS via the HTML renedering viewPyPI · open-webui · fixed in 0.6.5
- CVE-2026-45301Open WebUI: Missing permission check in files API allows authenticated users to list, access and delete every uploaded filePyPI · open-webui · fixed in 0.3.16