Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-40260pypdf: Manipulated XMP metadata entity declarations can exhaust RAMPyPI · pypdf · fixed in 6.10.0
- CVE-2026-31987Apache Airflow: JWT token appearing in logsPyPI · apache-airflow, apache-airflow-core · fixed in 3.2.0
- CVE-2026-40192Pillow is vulnerable to a FITS GZIP decompression bombPyPI · pillow · fixed in 12.2.0
- CVE-2026-40256Weblate: Prefix-Based Repository Boundary Check Bypass via Symlink/Junction Path Prefix CollisionPyPI · weblate · fixed in 5.17
- CVE-2026-39845Weblate: SSRF via the webhook add-on using unprotected fetch_url()PyPI · weblate · fixed in 5.17
- CVE-2026-34393Weblate: Privilege escalation in the user API endpointPyPI · weblate · fixed in 5.17
- CVE-2026-34244Weblate: SSRF via Project-Level Machinery ConfigurationPyPI · weblate · fixed in 5.17
- CVE-2026-34242Weblate: Arbitrary File Read via SymlinkPyPI · weblate · fixed in 5.17
- CVE-2026-33440Weblate: Authenticated SSRF via redirect bypass of ALLOWED_ASSET_DOMAINS in screenshot URL uploadsPyPI · weblate · fixed in 5.17
- CVE-2026-33435Weblate: Remote code execution during backup restorationPyPI · weblate · fixed in 5.17
- CVE-2026-33220Weblate: JavaScript localization CDN add-on allows arbitrary local file read outside the repositoryPyPI · weblate · fixed in 5.17
- CVE-2026-33214Weblate has improper access control for the translation memory APIPyPI · weblate · fixed in 5.17
- CVE-2026-33212Weblate: Improper access control for pending tasks in APIPyPI · weblate · fixed in 5.17
- CVE-2026-25219Apache Airflow: Sensitive Azure Service Bus connection string (and possibly other providers) exposed to users with view accessPyPI · apache-airflow, apache-airflow-core · fixed in 3.0.0, 3.1.8
- CVE-2025-54550Apache Airflow: RCE by race condition in example_xcom dagPyPI · apache-airflow, apache-airflow-core · fixed in 3.0.0, 3.2.0
- CVE-2026-30625Upsonic 0.71.6 contains a remote code execution vulnerability in its MCP server/task creation functionality.PyPI · upsonic · fixed in 0.72.0
- CVE-2026-40683In OpenStack Keystone before 28.0.1, the LDAP identity backend does not convert the user enabled attribute to a boolean when the user_enablePyPI · keystone · fixed in 28.0.1
- CVE-2026-40289PraisonAI Browser Server allows unauthenticated WebSocket clients to hijack connected extension sessionsPyPI · praisonai, praisonaiagents · fixed in 4.5.139, 1.5.140
- CVE-2026-40288PraisonAI: Critical RCE via `type: job` workflow YAMLPyPI · praisonai, praisonaiagents · fixed in 4.5.139, 1.5.140
- CVE-2026-40287PraisonAI has RCE via Automatic tools.py ImportPyPI · praisonai, praisonaiagents · fixed in 4.5.139, 1.5.140
- CVE-2026-40315PraisonAI: SQLiteConversationStore didn't validate table_prefix when constructing SQL queriesPyPI · praisonai · fixed in 4.5.133
- CVE-2026-34225Open WebUI has Blind Server Side Request Forgery in its Image Edit FunctionalityPyPI · open-webui
- CVE-2026-1462Safe Mode Bypass in keras-team/kerasPyPI · keras · fixed in 3.13.2
- CVE-2026-33858Apache Airflow: Unsafe Deserialization via Legacy Serialization Keys (type/var) Bypass in XCom APIPyPI · apache-airflow, apache-airflow-core · fixed in 3.2.0
- CVE-2025-66236Apache Airflow: Secrets from Airflow config file logged in plain text in DAG run logs UIPyPI · apache-airflow, apache-airflow-core · fixed in 3.2.0
- CVE-2026-4810Remote Code Execution in Google Agent Development Kit (ADK)PyPI · google-adk · fixed in 1.28.1, 2.0.0a2
- CVE-2026-6111FoundationAgents MetaGPT common.py decode_image server-side request forgeryPyPI · metagpt
- CVE-2026-1116Cross-site Scripting (XSS) in parisneo/lollmsPyPI · lollms · fixed in 2.1.1
- CVE-2026-6110FoundationAgents MetaGPT Tree-of-Thought Solver tot.py generate_thoughts code injectionPyPI · metagpt
- CVE-2026-6109FoundationAgents MetaGPT Mineflayer HTTP API index.js evaluateCode cross-site request forgeryPyPI · metagpt