Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-42304Twisted: Denial of Service (DoS) in twisted.names via Crafted DNS Compression Pointer ChainsPyPI · twisted · fixed in 26.4.0, 26.4.0rc2
- CVE-2026-44368PyQuorum: Timing side‑channel in mul_modPyPI · pyquorum · fixed in 0.2.1
- CVE-2026-44363Unsafe remote resource fetching in expansion misp-modulesPyPI · misp-modules · fixed in 3.0.8
- CVE-2026-44364misp-modules website - Missing CSRF protection in the website home blueprintPyPI · misp-modules
- CVE-2026-42032CKAN: Unauthenticated Authorization Bypass in `datastore_search_sql`PyPI · ckan · fixed in 2.10.10, 2.11.5
- CVE-2026-41255CKAN: CSRF exemption primed by anonymous requestsPyPI · ckan · fixed in 2.10.10, 2.11.5
- CVE-2026-41132CKAN: No certificate validation on STMP connectionPyPI · ckan · fixed in 2.11.5, 2.10.10
- CVE-2026-42031CKAN: Unauthenticated SQL Injection and Authorization Bypass in `datastore_search_sql`PyPI · ckan · fixed in 2.10.10, 2.11.5
- CVE-2026-44431urllib3: Sensitive headers forwarded across origins in proxied low-level redirectsPyPI · urllib3 · fixed in 2.7.0
- CVE-2026-44432urllib3: Decompression-bomb safeguards bypassed in parts of the streaming APIPyPI · urllib3 · fixed in 2.7.0
- CVE-2026-42266JupyterLab has an Extension Manager API/GUI Policy Discrepancy allowing 3rd party (malicious) extensions install via POST request.PyPI · jupyterlab · fixed in 4.5.7
- CVE-2026-42557jupyterlab: Command linker attributes in HTML enable one-click command execution from untrusted contentPyPI · jupyterlab, notebook · fixed in 4.5.7, 7.5.6
- CVE-2026-44307Mako: Path traversal via backslash URI on Windows in TemplateLookupPyPI · mako · fixed in 1.3.12
- CVE-2026-42545Granian: DoS via WSGI response header panicPyPI · granian · fixed in 2.7.4
- CVE-2026-42544Granian: Unauthenticated DoS via WebSocket subprotocol header panicPyPI · granian · fixed in 2.7.4
- CVE-2026-44305Lemur: LDAP TLS certificate verification globally disabled enables credential interceptionPyPI · lemur · fixed in 1.9.0
- CVE-2026-44304Lemur: LDAP Filter Injection enables post-authentication privilege escalationPyPI · lemur · fixed in 1.9.0
- CVE-2026-42196django-s3file: Relative path traversalPyPI · django-s3file · fixed in 7.0.2
- CVE-2026-43948wger: cross-tenant password reset and plaintext disclosure via gym=None bypassPyPI · wger · fixed in 2.6
- CVE-2026-44223vLLM: extract_hidden_states speculative decoding crashes server on any request with penalty parametersPyPI · vllm · fixed in 0.20.0
- CVE-2026-44222vLLM: Remote DoS via Special-Token PlaceholdersPyPI · vllm · fixed in 0.20.0
- CVE-2026-44219ciguard: SCA HTTP client reads response body without size capPyPI · ciguard · fixed in 0.8.2
- CVE-2026-44218ciguard: Container image runs as root (no USER directive)PyPI · ciguard · fixed in 0.8.2
- CVE-2026-44220ciguard: discover_pipeline_files follows symlinks out of scan rootPyPI · ciguard · fixed in 0.8.2
- CVE-2026-42175requests-hardened: Server-Side Request Forgery (SSRF) in requests-hardened RFC 6598PyPI · requests-hardened · fixed in 1.2.1
- CVE-2026-42048Langflow: Path Traversal in Langflow Knowledge Bases APIPyPI · langflow · fixed in 1.9.0
- CVE-2026-42303Fides: Privacy Request Identity Verification Bypass Vulnerability via Duplicate DetectionPyPI · ethyca-fides · fixed in 2.83.2
- CVE-2026-43891changedetection.io: Arbitrary Local File Read via crafted backup restorePyPI · changedetection-io · fixed in 0.55.1
- CVE-2026-41895changedetection.io: XXE vulnerability in the changedetection.io projectPyPI · changedetection-io · fixed in 0.54.10
- CVE-2025-65719An issue in Open Source Kubectl MCP Server v1.1.1 allows attackers to execute arbitrary code on a victim system via user interaction with a PyPI · kubectl-mcp-server · fixed in 1.2.0