Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-6550Key commitment policy bypass via shared key cache in AWS Encryption SDK for PythonPyPI · aws-encryption-sdk · fixed in 3.3.1, 4.0.5
- CVE-2026-28684python-dotenv: Symlink following in set_key allows arbitrary file overwrite via cross-device rename fallbackPyPI · python-dotenv · fixed in 1.2.2
- CVE-2026-3219pip doesn't reject concatenated ZIP and tar archivesPyPI · pip · fixed in 26.1
- CVE-2025-66335Apache Doris MCP Server: MCP SQL injectPyPI · doris-mcp-server · fixed in 0.6.1
- CVE-2026-6608lm-sys fastchat Arena Side-by-Side View add_text control flowPyPI · fschat
- CVE-2026-6607lm-sys fastchat Worker API Endpoint api_generate resource consumptionPyPI · fschat
- CVE-2026-6606modelscope agentscope _agent_base.py _process_audio_block server-side request forgeryPyPI · agentscope
- CVE-2026-6605modelscope agentscope Internal Service _common.py _get_bytes_from_web_url server-side request forgeryPyPI · agentscope
- CVE-2026-6604modelscope agentscope Cloud Metadata Endpoint _openai_tools.py openai_audio_to_text server-side request forgeryPyPI · agentscope
- CVE-2026-6603modelscope agentscope _python.py execute_shell_command code injectionPyPI · agentscope
- CVE-2026-6599langflow-ai langflow Model Context Protocol Configuration API mcp_projects.py install_mcp_config injectionPyPI · langflow
- CVE-2026-6598langflow-ai langflow Project Creation Endpoint projects.py encrypt_auth_settings cleartext storage in filePyPI · langflow · fixed in 1.9.1
- CVE-2026-6597langflow-ai langflow Flow Using API core.py has_api_terms credentials storagePyPI · langflow
- CVE-2026-6596langflow-ai langflow API Endpoint endpoints.py create_upload_file unrestricted uploadPyPI · langflow-base · fixed in 0.9.1
- CVE-2026-6587vibrantlabsai RAGAS Collections util.py _try_process_url server-side request forgeryPyPI · ragas
- CVE-2026-40948Apache Airflow Providers Keycloak: OAuth Login CSRF — Missing State Parameter in Keycloak Auth ManagerPyPI · apache-airflow-providers-keycloak · fixed in 0.7.0
- CVE-2026-32690Apache Airflow: 3.x - Nested Variable Secret Values Bypass Redaction via max_depth=1PyPI · apache-airflow, apache-airflow-core · fixed in 3.2.0
- CVE-2026-30898Apache Airflow: Bad example of BashOperator shell injection via dag_run.confPyPI · apache-airflow, apache-airflow-core · fixed in 3.0.0, 3.2.0
- CVE-2026-30912Apache Airflow: Exposing stack trace in case of constraint errorPyPI · apache-airflow, apache-airflow-core · fixed in 3.0.0, 3.2.0
- CVE-2026-25917Apache Airflow: API extra-links triggers XCom deserialization/class instantiation (Airflow 3.1.5)PyPI · apache-airflow, apache-airflow-core · fixed in 3.0.0, 3.2.0
- CVE-2026-32228Apache Airflow: Users with asset materialization permisssions could trigger Dags they had no access toPyPI · apache-airflow-core · fixed in 3.2.0
- CVE-2026-40491gdown Affected by Arbitrary File Write via Path Traversal in gdown.extractallPyPI · gdown · fixed in 5.2.2
- CVE-2026-40347Python-Multipart affected by Denial of Service via large multipart preamble or epilogue dataPyPI · python-multipart · fixed in 0.0.26
- CVE-2026-40474wger has Broken Access Control in the Global Gym Configuration Update EndpointPyPI · wger
- CVE-2026-40353wger: Stored XSS via Unescaped License Attribution FieldsPyPI · wger
- CVE-2026-40258Gramps Web API has Zip Slip Path Traversal in Media Archive ImportPyPI · gramps-webapi · fixed in 3.11.1
- CVE-2026-35402mcp-neo4j-cypher: SSRF and Data Modification via read_only Mode Bypass Through CALL ProceduresPyPI · mcp-neo4j-cypher · fixed in 0.6.0
- CVE-2026-40525OpenViking < 0.3.9 Authentication Bypass via VikingBot OpenAPIPyPI · openviking · fixed in 0.3.9
- CVE-2026-40320Giskard has an Unsandboxed Jinja2 Template Rendering in ConformityCheckPyPI · giskard-checks · fixed in 1.0.2b1
- CVE-2026-40319Giskard has a Regular Expression Denial of Service (ReDoS) in RegexMatching CheckPyPI · giskard-checks · fixed in 1.0.2b1