Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-44340PraisonAI: Symlink-extraction bypass of `_safe_extractall` writes outside `dest_dir`PyPI · praisonai · fixed in 4.6.37
- CVE-2026-44339PraisonAI has unsafe tool resolution in `ToolExecutionMixin.execute_tool`: undeclared `__main__` callables executePyPI · praisonai, praisonaiagents · fixed in 4.6.37, 1.6.37
- CVE-2026-44338PraisonAI ships and generates a legacy API server with authentication disabled by default, allowing unauthenticated workflow executionPyPI · praisonai · fixed in 4.6.34
- CVE-2026-44337PraisonAI knowledge-store backends interpolate unvalidated collection names into SQL and CQL queriesPyPI · praisonai · fixed in 4.6.34
- CVE-2026-44336PraisonAI MCP `tools/call` path-traversal and RCE via Python `.pth` injectionPyPI · praisonai · fixed in 4.6.34
- CVE-2026-44335SSRF bypass in PraisonAIPyPI · praisonaiagents · fixed in 1.6.32
- CVE-2026-44334PraisonAI: Unauthenticated RCE via `tool_override.py`PyPI · praisonai · fixed in 4.6.32
- CVE-2026-41497Incomplete fix for CVE-2026-34935: Command Injection in MervinPraison/PraisonAIPyPI · praisonai · fixed in 4.5.149
- CVE-2026-41496PraisonAI: SQL Injection via unvalidated `table_prefix` in 9 conversation store backends (incomplete fix for CVE-2026-40315)PyPI · praisonai, praisonaiagents · fixed in 4.5.149, 1.6.8
- CVE-2026-42208LiteLLM: SQL injection in Proxy API key verificationPyPI · litellm · fixed in 1.83.7
- CVE-2026-42203LiteLLM: Server-Side Template Injection in /prompts/test endpointPyPI · litellm · fixed in 1.83.7
- CVE-2026-42271LiteLLM: Authenticated command execution via MCP stdio test endpointsPyPI · litellm · fixed in 1.83.7
- CVE-2026-42150wlc: print_html outputs API data without HTML escaping, enabling stored XSSPyPI · wlc · fixed in 2.0.0
- CVE-2025-55449AstrBotDevs AstrBot 3.5.15 has Advanced_System_for_Text_Response_and_Bot_Operations_Tool as the hardcoded private key used to sign a JWT.PyPI · astrbot · fixed in 3.5.18
- CVE-2026-38360Directory Traversal vulnerability in fohrloop dash-uploader v.0.1.0 through v.0.7.0a2 allows a remote attacker to execute arbitrary code viaPyPI · dash-uploader
- CVE-2026-38361Multiple unauthenticated denial-of-service (DoS) issues in fohrloop dash-uploader v0.1.0 through v0.7.0a2.PyPI · dash-uploader · fixed in 0.7.0a1
- CVE-2026-8088OSGeo gdal GDapi.c GDfieldinfo out-of-boundsPyPI · gdal · fixed in 3.13.0
- CVE-2026-8087OSGeo gdal GDapi.c GDnentries heap-based overflowPyPI · gdal · fixed in 3.13.0
- CVE-2026-8086OSGeo gdal SWapi.c SWnentries heap-based overflowPyPI · gdal · fixed in 3.13.0
- CVE-2026-8084OSGeo gdal HDF-EOS Grid File SWapi.c memmove out-of-boundsPyPI · gdal · fixed in 3.13.0
- CVE-2026-44243GitPython: Path traversal in GitPython reference APIs allows arbitrary file write and delete outside the repositoryPyPI · gitpython · fixed in 3.1.48
- CVE-2026-44244GitPython: Newline injection in config_writer().set_value() enables RCE via core.hooksPathPyPI · gitpython · fixed in 3.1.49
- CVE-2026-42284GitPython: Unsafe option check validates multi_options before shlex.split transforms itPyPI · gitpython · fixed in 3.1.47
- CVE-2026-42215GitPython: Command injection via Git options bypassPyPI · gitpython · fixed in 3.1.47
- CVE-2026-44742Postorius through 1.3.13 does not escape HTML in the message subject when rendering it in the Held messages pop-up, as exploited in the wildPyPI · postorius
- CVE-2026-44264Weblate is vulnerable to XSS via crafted MarkdownPyPI · weblate · fixed in 5.17.1
- CVE-2026-44263Weblate: Private Translation Enumeration via Screenshot APIPyPI · weblate · fixed in 5.17.1
- CVE-2026-41519Weblate's API Token Not Invalidated on Password ChangePyPI · weblate · fixed in 5.17.1
- CVE-2026-41654Weblate is Vulnerable to Authenticated SSRF via Project Backup Import bypassing validate_repo_urlPyPI · weblate · fixed in 5.17.1
- CVE-2026-41490Dagster Vulnerable to SQL Injection via Dynamic Partition Keys in Database I/O Manager IntegrationsPyPI · dagster, dagster-deltalake +4 · fixed in 1.13.1, 0.29.1