Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-7725PrefectHQ prefect GitRepository Pull storage.py argument injectionPyPI · prefect · fixed in 3.6.25.dev7
- CVE-2026-7724PrefectHQ prefect Webhook/Notification validate_restricted_url toctouPyPI · prefect · fixed in 3.6.28.dev2
- CVE-2026-7723PrefectHQ prefect WebSocket Endpoint in missing authenticationPyPI · prefect · fixed in 3.6.14
- CVE-2026-7722PrefectHQ prefect Health Check API health endswith improper authenticationPyPI · prefect · fixed in 3.6.22
- CVE-2025-67796IKUS Rdiffweb before 2.10.5 has an improper authorization flaw that allows an attacker with any valid or stolen access token to act as otherPyPI · rdiffweb · fixed in 2.10.6
- CVE-2026-7711MindsDB Engine proc_wrapper.py exec unrestricted uploadPyPI · mindsdb
- CVE-2026-7700langflow-ai langflow LambdaFilterComponent lambda_filter.py eval code injectionPyPI · langflow · fixed in 1.10.3
- CVE-2026-7669sgl-project SGLang HuggingFace Transformer hf_transformers_utils.py get_tokenizer code injectionPyPI · sglang
- CVE-2026-7597mem0ai mem0 faiss.py pickle.dump deserializationPyPI · mem0ai · fixed in 2.0.0b2
- CVE-2026-7579AstrBotDevs AstrBot Dashboard auth.py hard-coded credentialsPyPI · astrbot
- CVE-2026-43001An issue was discovered in OpenStack Keystone before 29.0.2.PyPI · keystone · fixed in 27.0.2, 28.0.2, 29.0.2
- CVE-2026-43003An issue was discovered in OpenStack ironic-python-agent 1.0.0 through 11.5.0.PyPI · ironic-python-agent · fixed in 11.6.0
- CVE-2026-41016Apache Airflow Providers SMTP: No certificate validation on SMTP STARTTLS connections in SMTP providerPyPI · apache-airflow-providers-smtp · fixed in 3.0.0
- CVE-2025-13030All versions of the package django-mdeditor are vulnerable to Missing Authentication for Critical Function in the image upload endpoint.PyPI · django-mdeditor
- CVE-2026-7404getsimpletool mcpo-simple-server base_manager.py delete_shared_prompt path traversalPyPI · mcpo-simple-server
- CVE-2026-24178NVIDIA NVFlare Dashboard contains a vulnerability in the user management and authentication system where an unauthenticated attacker may cauPyPI · nvflare · fixed in 2.7.2
- CVE-2026-42510OpenStack Ironic before 35.0.1 allows ipmitool execution in a non-default configuration that has a console interface.PyPI · ironic · fixed in 35.0.1
- CVE-2026-7212edvardlindelof notes-mcp notes_mcp.py path traversalPyPI · notes-mcp
- CVE-2026-7206dubydu sqlite-mcp entry.py extract_to_json sql injectionPyPI · sqlite-mcp
- CVE-2026-7159douinc mkdocs-mcp-plugin server.py list_documents path traversalPyPI · mkdocs-mcp-plugin
- CVE-2026-7158dmitryglhf mcp-url-downloader server.py _validate_url_safe server-side request forgeryPyPI · mcp-url-downloader
- CVE-2026-7150dh1011 auto-favicon MCP Tool server.py generate_favicon_from_url server-side request forgeryPyPI · auto-favicon
- CVE-2026-7149dexhunter kaggle-mcp server.py prepare_kaggle_dataset path traversalPyPI · kaggle-mcp
- CVE-2026-7142Wooey API Endpoint scripts.py add_or_update_script improper authorizationPyPI · wooey · fixed in 0.13.3rc1
- CVE-2026-7141vLLM KV Block kv_cache_interface.py has_mamba_layers uninitialized resourcePyPI · vllm · fixed in 0.19.1
- CVE-2026-6357pip self-update functionality can import newly installed modules after wheel installationPyPI · pip · fixed in 26.1
- CVE-2026-6984AstrBotDevs AstrBot Dashboard API t2i.py create_template special elements used in a template enginePyPI · astrbot
- CVE-2026-41488angchain-openai: Image token counting SSRF protection can be bypassed via DNS rebindingPyPI · langchain-openai · fixed in 1.1.14
- CVE-2026-41481LangChain: HTMLHeaderTextSplitter.split_text_from_url SSRF Redirect BypassPyPI · langchain-text-splitters · fixed in 1.1.2
- CVE-2026-41426pretalx: Email injection via unescaped user-controlled placeholders in pretalx mail templatesPyPI · pretalx · fixed in 2026.1.0