Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-40087LangChain has incomplete f-string validation in prompt templatesPyPI · langchain-core · fixed in 0.3.84, 1.2.28
- CVE-2026-5974FoundationAgents MetaGPT terminal.py Bash.run os command injectionPyPI · metagpt
- CVE-2026-5973FoundationAgents MetaGPT common.py get_mime_type os command injectionPyPI · metagpt
- CVE-2026-5972FoundationAgents MetaGPT terminal.py Terminal.run_command os command injectionPyPI · metagpt · fixed in 0.8.2
- CVE-2026-34983Wasmtime has a use-after-free bug after cloning `wasmtime::Linker`PyPI · wasmtime
- CVE-2026-5971FoundationAgents MetaGPT XML action_node.py ActionNode.xml_fill eval injectionPyPI · metagpt
- CVE-2026-40072web3.py affected by SSRF via CCIP Read (EIP-3668) OffchainLookup URL handlingPyPI · web3 · fixed in 7.15.0, 8.0.0b2
- CVE-2026-40071pyLoad WebUI JSON permission mismatch lets ADD/DELETE users invoke MODIFY-only actionsPyPI · pyload-ng · fixed in 0.5.0b3.dev97
- CVE-2026-39987marimo Affected by Pre-Auth Remote Code Execution via Terminal WebSocket Authentication BypassPyPI · marimo · fixed in 0.23.0
- CVE-2026-39981AGiXT has a Path Traversal in safe_join()PyPI · agixt · fixed in 1.9.2
- CVE-2026-5970FoundationAgents MetaGPT HumanEvalBenchmark/MBPPBenchmark check_solution code injectionPyPI · metagpt
- CVE-2026-39980OpenCTI affected by RCE via notifier templatePyPI · pycti · fixed in 6.9.5
- CVE-2025-14551Senstive information disclosure was affecting subiquityPyPI · subiquity
- CVE-2025-57735Apache Airflow: Airflow Logout Not Invalidating JWTPyPI · apache-airflow, apache-airflow-core · fixed in 3.2.0
- CVE-2026-34538Apache Airflow: Authorization bypass in DagRun wait endpoint (XCom exposure)PyPI · apache-airflow, apache-airflow-core · fixed in 3.2.0
- CVE-2026-40036Unfurl < 2026.04 - Denial of Service via Unbounded zlib DecompressionPyPI · dfir-unfurl · fixed in 2026.04, 20260405
- CVE-2026-40035Unfurl - Werkzeug Debugger Exposure via String Config ParsingPyPI · dfir-unfurl
- CVE-2026-39892cryptography has a buffer overflow if non-contiguous buffers were passed to APIsPyPI · cryptography · fixed in 46.0.7
- CVE-2026-39891PraisonAI has a Template Injection in Agent Tool DefinitionsPyPI · praisonai · fixed in 4.5.115
- CVE-2026-39890PraisonAI Affected by Remote Code Execution via YAML Deserialization in Agent Definition LoadingPyPI · praisonai · fixed in 4.5.115
- CVE-2026-39889PraisonAI has Unauthenticated SSE Event Stream Exposes All Agent Activity in A2U ServerPyPI · praisonai · fixed in 4.5.115
- CVE-2026-39888PraisonAIAgents has a sandbox escape via exception frame traversal in `execute_code` (subprocess mode)PyPI · praisonaiagents · fixed in 1.5.115
- CVE-2026-39844NiceGUI has a Path Traversal in NiceGUI Upload Filename on Windows via Backslash Bypass of PurePosixPath SanitizationPyPI · nicegui · fixed in 3.10.0
- CVE-2026-39413LightRAG has a JWT Algorithm Confusion Vulnerability in LightRAG APIPyPI · lightrag-hku · fixed in 1.4.14
- CVE-2026-33753Improper Certificate Validation in rfc3161-clientPyPI · rfc3161-client · fixed in 1.0.6
- CVE-2026-5600A new API endpoint introduced in pretix 2025 that is supposed to return all check-in events of a specific event in fact returns all check-PyPI · pretix · fixed in 2026.1.2, 2026.2.1, 2026.3.1
- CVE-2026-1163Insufficient Session Expiration in parisneo/lollmsPyPI · lollms
- CVE-2026-31040A vulnerability was identified in stata-mcp prior to v1.13.0 where insufficient validation of user-supplied Stata do-file content can lead tPyPI · stata-mcp · fixed in 1.13.0
- CVE-2026-39847Emmett has a path traversal in internal assets handlerPyPI · emmett · fixed in 2.8.1
- CVE-2026-39376FastFeedParser has an infinite redirect loop DoS via meta-refresh chainPyPI · fastfeedparser · fixed in 0.5.10