Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-31220PySyft (Syft Datasite/Server) versions 0.9.5 and earlier are vulnerable to remote code execution due to insufficient validation and sandboxiPyPI · syft
- CVE-2026-31221PyTorch-Lightning versions 2.6.0 and earlier contain an insecure deserialization vulnerability (CWE-502) in the checkpoint loading mechanismPyPI · lightning, pytorch-lightning
- CVE-2026-31222The snorkel library thru v0.10.0 contains an insecure deserialization vulnerability (CWE-502) in the Trainer.load() method of the Trainer clPyPI · snorkel
- CVE-2026-31223The snorkel library thru v0.10.0 contains a critical insecure deserialization vulnerability (CWE-502) in the BaseLabeler.load() method of thPyPI · snorkel
- CVE-2026-31224The snorkel library thru v0.10.0 contains an insecure deserialization vulnerability (CWE-502) in the MultitaskClassifier.load() method of thPyPI · snorkel
- CVE-2026-31225The superduper project thru v0.10.0 contains a critical remote code execution vulnerability in its query parsing component.PyPI · superduper-framework
- CVE-2026-31233Guardrails AI thru 0.6.7 contains a code injection vulnerability (CWE-94) in its Hub package installation mechanism.PyPI · guardrails-ai
- CVE-2026-31234Horovod thru 0.28.1 contains an insecure deserialization vulnerability (CWE-502) in its KVStore HTTP server component.PyPI · horovod
- CVE-2026-31235The imgaug library thru 0.4.0 contains an insecure deserialization vulnerability in its BackgroundAugmenter class within the multicore.py moPyPI · imgaug
- CVE-2026-31236The llm CLI tool thru 0.27.1 contains a critical code injection vulnerability via its --functions command-line argument.PyPI · llm
- CVE-2026-31237The Ludwig framework thru 0.10.4 is vulnerable to insecure deserialization (CWE-502) through its predict() method.PyPI · ludwig
- CVE-2026-31238The Ludwig framework thru 0.10.4 is vulnerable to insecure deserialization (CWE-502) in its model serving component.PyPI · ludwig
- CVE-2026-31239The mamba language model framework thru 2.2.6 is vulnerable to insecure deserialization (CWE-502) when loading pre-trained models from HuggiPyPI · mamba-ssm
- CVE-2026-31240The mem0 1.0.0 server lacks authentication and authorization controls for its memory management API endpoints.PyPI · mem0ai
- CVE-2026-31241The mem0 1.0.0 server lacks authentication and authorization controls for its memory deletion API endpoint (DELETE /memories).PyPI · mem0ai
- CVE-2026-31245The mem0 1.0.0 server lacks authentication and authorization controls for its memory creation API endpoint (POST /memories).PyPI · mem0ai
- CVE-2026-43901Wireshark MCP: Arbitrary file write via export_objects when WIRESHARK_MCP_ALLOWED_DIRS is not configuredPyPI · wireshark-mcp
- CVE-2026-42874Microdot: HTTP response splitting in Response.set_cookie()PyPI · microdot · fixed in 2.6.1
- CVE-2026-2614Arbitrary File Read via Prompt Tag Source Validation Bypass in mlflow/mlflowPyPI · mlflow · fixed in 3.10.0
- CVE-2026-8319aiwaves-cn agents cheshire_cat_core stray_cat.py recall_relevant_memories_to_working_memory resource consumptionPyPI · ai-agents
- CVE-2026-42864FireFighter: Unauthenticated SSRF in Raid jira_bot endpoint allows IAM credential theftPyPI · firefighter-incident · fixed in 0.0.54
- CVE-2026-42860Open edx Enterprise Service: SSRF via SAML metadata URL in sync_provider_data endpointPyPI · edx-enterprise · fixed in 7.0.5
- CVE-2026-44226pyLoad: Unauthenticated traceback disclosure via global exception handler in WebUIPyPI · pyload-ng · fixed in 0.5.0b3.dev100
- CVE-2026-42315pyLoad: Path Traversal via Package Folder Name in set_package_dataPyPI · pyload-ng · fixed in 0.5.0b3.dev100
- CVE-2026-42314pyLoad: Path Traversal via Package Folder NamePyPI · pyload-ng · fixed in 0.5.0b3.dev100
- CVE-2026-42312pyload-ng: non-admin SETTINGS users can disable outbound TLS peer verificationPyPI · pyload-ng · fixed in 0.5.0b3.dev100
- CVE-2026-42313pyload-ng: non-admin SETTINGS users can redirect all outbound traffic through an attacker-controlled proxyPyPI · pyload-ng · fixed in 0.5.0b3.dev100
- CVE-2026-2393Server-Side Request Forgery (SSRF) in mlflow/mlflowPyPI · mlflow · fixed in 3.9.0
- CVE-2026-44201Wagtail: Improper restriction handling on Documents and Images APIPyPI · wagtail · fixed in 7.0.7, 7.3.2
- CVE-2026-44200Wagtail: Improper permission handling when copying pagesPyPI · wagtail · fixed in 7.0.7, 7.3.2