Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-54711PGHoard: Password written to debug logPyPI · pghoard
- CVE-2026-57117PraisonAI: Compute-bridged file tools allow shell command injectionPyPI · praisonai · fixed in 4.6.59
- CVE-2026-57121PraisonAI: Missing ownership check on DELETE endpoints allows members to delete others' content in Platform APIPyPI · praisonai-platform · fixed in 0.1.6
- CVE-2026-57116PraisonAI: AgentOS remains unauthenticated after GHSA-pm96 patched version and allows remote agent invocationPyPI · praisonai · fixed in 4.6.59
- CVE-2026-57114PraisonAI: Jobs webhook SSRF protection bypass via DNS rebindingPyPI · praisonai · fixed in 4.6.59
- CVE-2026-57113PraisonAI GitHub template cache path traversal allows outside-cache file write and directory deletionPyPI · praisonai · fixed in 4.6.59
- CVE-2026-56840PraisonAI: HTTPApproval dashboard renders tool arguments as raw HTML, allowing approval-page XSS to approve dangerous toolsPyPI · praisonai · fixed in 4.6.59
- CVE-2026-56838PraisonAI recipe.run_stream skips dangerous-tool policy enforcementPyPI · praisonai · fixed in 4.6.59
- CVE-2026-56837PraisonAI LinearBot processes unsigned webhooks when LINEAR_WEBHOOK_SECRET is missingPyPI · praisonai · fixed in 4.6.59
- CVE-2026-56836PraisonAI recipe serve Typer command bypasses the non-localhost authentication guardPyPI · praisonai · fixed in 4.6.59
- CVE-2026-56835PraisonAI Slack app_mention bypasses configured user/channel authorizationPyPI · praisonai · fixed in 4.6.59
- CVE-2026-56834PraisonAI dynamic-context artifact tools read arbitrary host files outside artifact storagePyPI · praisonai · fixed in 4.6.59
- CVE-2026-56833PraisonAI Dynamic Context history and terminal tools read files outside configured storage via path traversalPyPI · praisonai · fixed in 4.6.59
- CVE-2026-56832PraisonAI DiscordApproval accepts unrelated channel messages as dangerous-tool approvalsPyPI · praisonai · fixed in 4.6.59
- CVE-2026-114620Authlib: Unvalidated request_uri fetch in JWT-secured authorization request (JAR) leading to SSRFPyPI · authlib · fixed in 1.9.0
- CVE-2026-114619Authlib: OpenID implicit grant checks raw scope instead of allowed scope before issuing ID tokensPyPI · authlib · fixed in 1.9.0
- CVE-2026-114618Authlib: Default JWT bearer grant accepts assertions for the wrong audiencePyPI · authlib · fixed in 1.9.0
- CVE-2026-114617Authlib: ID token can disable its own nonce validation via the nonce_supported claimPyPI · authlib · fixed in 1.9.0
- CVE-2026-114616Authlib accepts an empty HMAC key, allowing JWS/JWT signature forgery (HS256/HS384/HS512)PyPI · authlib · fixed in 1.9.1
- CVE-2026-114615Authlib incomplete algorithm-confusion fix permits HMAC forgery with prefixed public keysPyPI · authlib · fixed in 1.9.0
- CVE-2026-114614Authlib: is_secure_transport() loopback exemption can be bypassed with a userinfo component, allowing cleartext-HTTP URLs to non-loopback hostsPyPI · authlib · fixed in 1.8.0
- CVE-2026-115419Unintended disclosure of data element to wrong session in Strands Agents SDK A2A ServerPyPI · strands-agents · fixed in 1.43.0
- CVE-2026-115355Mistune before 3.3.0 Path Traversal and XSS via Include DirectivePyPI · mistune · fixed in 3.3.0
- CVE-2026-114613MessagePack: Unbounded memory leak in msgpack C extension on strict_map_key validation failurePyPI · msgpack · fixed in 1.2.3
- CVE-2026-114612LiteLLM: Privilege Escalation to Proxy Admin via Cross-Domain Reuse of the Salt KeyPyPI · litellm · fixed in 1.100.4, 1.101.3, 1.102.2 and more
- CVE-2026-114610fpdf2: Exponential SVG '<use>' expansion causes CPU and memory exhaustion in 'FPDF.image()'PyPI · fpdf2 · fixed in 2.8.8
- CVE-2026-114609fpdf2 implicitly loads external URLs and local image paths when rendering attacker-controlled contentPyPI · fpdf2 · fixed in 2.8.8
- CVE-2026-114608Pylint: Arbitrary code execution via pickle deserialization of the stats cache in PYLINT_HOMEPyPI · pylint · fixed in 4.0.9
- CVE-2026-114605dnspython dns.name.from_wire_parser() excessive CPU usePyPI · dnspython · fixed in 2.9.0
- CVE-2026-75507GraphQL-core: Denial of service via quadratic complexity in the OverlappingFieldsCanBeMerged validation rulePyPI · graphql-core · fixed in 3.2.12, 3.3.0rc1