Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-44560Open WebUI: Unauthorized File and Knowledge Base Content Access via RAG Vector SearchPyPI · open-webui · fixed in 0.9.0
- CVE-2026-44561Open WebUI: Deactivated Channel Members Retain Full Access to Group/DM ChannelsPyPI · open-webui · fixed in 0.9.0
- CVE-2026-44562Open WebUI: Model Import Overwrites Any Model Without Ownership CheckPyPI · open-webui · fixed in 0.9.0
- CVE-2026-44563Open WebUI: Ollama Model Access Control Bypass via /api/generate, /api/embed, /api/embeddings, and /api/showPyPI · open-webui · fixed in 0.9.0
- CVE-2026-44564Open WebUI: Read-Only Users Can Modify Collaborative Documents via Socket.IOPyPI · open-webui · fixed in 0.9.0
- CVE-2026-44568Open WebUI: Stored XSS in Pending User Overlay via Incorrect DOMPurify Application OrderPyPI · open-webui · fixed in 0.9.0
- CVE-2026-45331Open WebUI: Full SSRF Vulnerability in the RAG Web Search FeaturePyPI · open-webui · fixed in 0.9.0
- CVE-2026-45339Open WebUI: API key endpoint restrictions bypassed via `x-api-key` header — full message processing on restricted endpointsPyPI · open-webu, open-webui · fixed in 0.9.0
- CVE-2026-45349Open WebUI: Broken Access Control for Completions APIPyPI · open-webui · fixed in 0.9.0
- CVE-2026-45399Open WebUI: Low-privilege authenticated users can enumerate and stop global background tasks, causing system-wide chat disruptionPyPI · open-webui · fixed in 0.9.0
- CVE-2026-45671Open WebUI: shared-chat branch ignores access_type, allowing unauthorized file deletionPyPI · open-webui · fixed in 0.9.0
- CVE-2026-45675Open WebUI: LDAP and OAuth First-User Race Condition Allows Multiple Admin AccountsPyPI · open-webui · fixed in 0.9.0
- CVE-2026-46383Microsoft APM: Windows absolute-path tar member overwrite during legacy-bundle probing in `apm install`PyPI · apm-cli · fixed in 0.13.0
- CVE-2026-45539Microsoft APM: Symlinks under `.apm/prompts/` and `.apm/agents/` are dereferenced during `apm install`, copying host-local file contents into the project treePyPI · apm · fixed in 0.13.0
- CVE-2026-44641Microsoft APM: plugin.json component paths escape plugin root and copy arbitrary host files during installPyPI · apm-cli · fixed in 0.8.12
- CVE-2026-2652Authentication Bypass in mlflow/mlflowPyPI · mlflow · fixed in 3.11.0, 3.10.0
- CVE-2026-45369python-utcp: Command Injection via Unsanitized Argument Substitution in CLI Communication ProtocolPyPI · utcp-cli · fixed in 1.1.2
- CVE-2026-45370python-utcp: Full Process Environment Exposed to CLI Subprocess - Secrets Leakage via Command InjectionPyPI · utcp-cli · fixed in 1.1.2
- CVE-2026-44661python-utcp: SSRF via attacker-controlled OpenAPI servers[0].url in HTTP communication protocolPyPI · utcp-http · fixed in 1.1.2
- CVE-2026-8597Missing integrity verification in Triton inference handler in Amazon SageMaker Python SDKPyPI · sagemaker · fixed in 2.257.2, 3.8.0
- CVE-2026-8596Cleartext storage of HMAC signing key in Amazon SageMaker Python SDK ModelBuilder/Serve pathPyPI · sagemaker · fixed in 2.257.2, 3.8.0
- CVE-2026-44520Docling-Graph: SSRF via Missing Internal IP Validation in URLInputHandlerPyPI · docling-graph · fixed in 1.5.1
- CVE-2026-44827Diffusers: None.py Trust Remote Code BypassPyPI · diffusers · fixed in 0.38.0
- CVE-2026-44513Diffusers: `trust_remote_code` bypass via `custom_pipeline` and local custom componentsPyPI · diffusers · fixed in 0.38.0
- CVE-2026-44503Kiota abstractions RedirectHandler leaks Cookie/Proxy-Authorization headers on cross-host redirectPyPI · microsoft-kiota-http · fixed in 1.9.9
- CVE-2026-44504Aegra: Cross-user run injection in /threads/{thread_id}/runs (IDOR)PyPI · aegra-api · fixed in 0.9.7
- CVE-2026-44484Compromise of PyTorch Lightning PyPi Package VersionsPyPI · lightning, pytorch-lightning · fixed in 2.6.4
- CVE-2026-44919In OpenStack Ironic through 35.x before a3f6d73, during image handling, an infinite loop in checksum calculations can occur via the file:///PyPI · ironic
- CVE-2026-44439LookyLoo - PlaywrightCapture permits access to local files and internal network resources during page capturePyPI · playwrightcapture · fixed in 1.39.6
- CVE-2026-42561Python-Multipart: Denial of Service via unbounded multipart part headersPyPI · python-multipart · fixed in 0.0.27