Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-5059aws-mcp-server AWS CLI Command Injection Remote Code Execution VulnerabilityPyPI · aws-mcp
- CVE-2026-39922GeoNode SSRF via Service RegistrationPyPI · geonode · fixed in 4.4.5, 5.0.2
- CVE-2026-39921GeoNode < 4.4.5, 5.0.2 SSRF via Document UploadPyPI · geonode · fixed in 4.4.5, 5.0.2
- CVE-2026-40178ajenti.plugin.core has a race conditions in 2FAPyPI · ajenti-plugin-core · fixed in 0.112
- CVE-2026-40177Password bypass when 2FA is activatedPyPI · ajenti-plugin-core · fixed in 0.112
- CVE-2026-40162Bugsink affected by authenticated arbitrary file write in artifactbundle/assemblePyPI · bugsink · fixed in 2.1.1
- CVE-2026-40160PraisonAIAgents has SSRF via unvalidated URL in `web_crawl` httpx fallbackPyPI · praisonaiagents · fixed in 1.5.128
- CVE-2026-40159PraisonAI Exposes Sensitive Environment Variable via Untrusted MCP Subprocess ExecutionPyPI · praisonai · fixed in 4.5.128
- CVE-2026-40158PraisonAI has Improper Control of Generation of Code ('Code Injection') and Protection Mechanism Failure in praisonaiPyPI · praisonai · fixed in 4.5.128
- CVE-2026-40157PraisonAI affected by arbitrary file write via path traversal in `praisonai recipe unpack`PyPI · praisonai · fixed in 4.5.128
- CVE-2026-40156PraisonAI Affected by Implicit Execution of Arbitrary Code via Automatic `tools.py` LoadingPyPI · praisonai · fixed in 4.5.128
- CVE-2026-40086Rembg has a Path Traversal via Custom Model LoadingPyPI · rembg · fixed in 2.0.75
- CVE-2026-40217LiteLLM through 2026-04-08 allows remote attackers to execute arbitrary code via bytecode rewriting at the /guardrails/test_custom_code URI.PyPI · litellm · fixed in 1.83.10
- CVE-2026-1115Stored XSS in parisneo/lollmsPyPI · lollms · fixed in 2.2.0
- CVE-2026-33551An issue was discovered in OpenStack Keystone 14 through 26 before 26.1.1, 27.0.0, 28.0.0, and 29.0.0.PyPI · keystone · fixed in 26.1.1
- CVE-2026-40154PraisonAI Affected by Untrusted Remote Template Code ExecutionPyPI · praisonai · fixed in 4.5.128
- CVE-2026-40151PraisonAI Affected by Unauthenticated Information Disclosure of Agent Instructions via /api/agents in AgentOSPyPI · praisonai · fixed in 4.5.128
- CVE-2026-40153PraisonAIAgents Affected by Environment Variable Secret Exfiltration via os.path.expandvars() Bypassing shell=False in Shell ToolPyPI · praisonaiagents · fixed in 1.5.128
- CVE-2026-40152PraisonAIAgents has a Path Traversal via Unvalidated Glob Pattern in list_files Bypasses Workspace BoundaryPyPI · praisonaiagents · fixed in 1.5.128
- CVE-2026-40150PraisonAIAgents has SSRF and Local File Read via Unvalidated URLs in web_crawl ToolPyPI · praisonaiagents · fixed in 1.5.128
- CVE-2026-40149PraisonAI has an Unauthenticated Allow-List Manipulation Bypasses Agent Tool Approval Safety ControlsPyPI · praisonai · fixed in 4.5.128
- CVE-2026-40148PraisonAI Affected by Decompression Bomb DoS via Recipe Bundle Extraction Without Size LimitsPyPI · praisonai · fixed in 4.5.128
- CVE-2026-40117PraisonAIAgents Affected by Arbitrary File Read via read_skill_file Missing Workspace Boundary and Approval GatePyPI · praisonaiagents · fixed in 1.5.128
- CVE-2026-40116PraisonAI's Unauthenticated WebSocket Endpoint Proxies to Paid OpenAI Realtime API Without Rate LimitsPyPI · praisonai · fixed in 4.5.128
- CVE-2026-40115PraisonAI has an Unrestricted Upload Size in WSGI Recipe Registry Server Enables Memory Exhaustion DoSPyPI · praisonai · fixed in 4.5.128
- CVE-2026-40114PraisonAI has Server-Side Request Forgery via Unvalidated webhook_url in Jobs APIPyPI · praisonai · fixed in 4.5.128
- CVE-2026-40113PraisonAI has an Argument Injection into Cloud Run Environment Variables via Unsanitized Comma in gcloud --set-env-varsPyPI · praisonai · fixed in 4.5.128
- CVE-2026-40112PraisonAI has Stored XSS via Unsanitized Agent Output in HTML Rendering (nh3 Not a Required Dependency)PyPI · praisonai · fixed in 4.5.128
- CVE-2026-40111PraisonAIAgents has an OS Command Injection via shell=True in Memory Hooks Executor (memory/hooks.py)PyPI · praisonaiagents · fixed in 1.5.128
- CVE-2026-40088Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in praisonaiPyPI · praisonai · fixed in 4.5.121