Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-39373JWCrypto: JWE ZIP decompression bombPyPI · jwcrypto · fixed in 1.5.7
- CVE-2026-22680OpenViking < 0.3.3 Missing Authorization via Task PollingPyPI · openviking · fixed in 0.3.3
- CVE-2026-39307PraisonAI has an Arbitrary File Write (Zip Slip) in Templates ExtractionPyPI · praisonai · fixed in 4.5.113
- CVE-2026-39308PraisonAI recipe registry publish path traversal allows out-of-root file writePyPI · praisonai · fixed in 4.5.113
- CVE-2026-39306PraisonAI recipe registry pull path traversal writes files outside the chosen output directoryPyPI · praisonai · fixed in 4.5.113
- CVE-2026-39305Arbitrary File Write / Path Traversal in Action OrchestratorPyPI · praisonai · fixed in 4.5.113
- CVE-2026-35615PraisonAI has a Path Traversal in FileToolsPyPI · praisonai · fixed in 1.5.113
- CVE-2026-35592pyLoad has an Incomplete Tar Path Traversal Fix in UnTar._safe_extractall via os.path.commonprefix BypassPyPI · pyload-ng · fixed in 0.5.0b3.dev97
- CVE-2026-35586Authorization Bypass for SSL Certificate/Key Configuration Due to Option Name Mismatch in pyload-ngPyPI · pyload-ng · fixed in 0.5.0b3.dev97
- CVE-2026-35523Authentication bypass in strawberry-graphql via legacy graphql-ws WebSocket subprotocolPyPI · strawberry-graphql · fixed in 0.312.3
- CVE-2026-35526Strawberry GraphQL affected by a Denial of Service via unbounded WebSocket subscriptionsPyPI · strawberry-graphql · fixed in 0.312.3
- CVE-2026-35492Kedro-Datasets has a path traversal vulnerability in PartitionedDataset allows arbitrary file writePyPI · kedro-datasets · fixed in 9.3.0
- CVE-2026-35490changedetection.io has an Authentication Bypass via Decorator OrderingPyPI · changedetection-io · fixed in 0.54.8
- CVE-2026-35464pyLoad has an incomplete fix for CVE-2026-33509: unprotected storage_folder enables arbitrary file write to Flask session store and code executionPyPI · pyload-ng
- CVE-2026-35463pyLoad has Improper Neutralization of Special Elements used in an OS CommandPyPI · pyload-ng · fixed in 0.5.0b3.dev97
- CVE-2026-33034Potential denial-of-service vulnerability in ASGI requests via memory upload limit bypassPyPI · django · fixed in 4.2.30, 5.2.13, 6.0.4
- CVE-2026-33033Potential denial-of-service vulnerability in MultiPartParser via base64-encoded file uploadPyPI · django · fixed in 4.2.30, 5.2.13, 6.0.4
- CVE-2026-4292Privilege abuse in ModelAdmin.list_editablePyPI · django · fixed in 6.0.4, 5.2.13, 4.2.30
- CVE-2026-4277Privilege abuse in GenericInlineModelAdminPyPI · django · fixed in 4.2.30, 5.2.13, 6.0.4
- CVE-2026-3902ASGI header spoofing via underscore/hyphen conflationPyPI · django · fixed in 4.2.30, 5.2.13, 6.0.4
- CVE-2026-33866Authorization Bypass in MLflow AJAX EndpointPyPI · mlflow · fixed in 3.11.0rc0
- CVE-2026-33865Stored XSS via unsafe YAML parsing in MLflowPyPI · mlflow · fixed in 3.11.0rc0, 3.11.1
- CVE-2026-1114Improper Access Control via Weak JWT Token in parisneo/lollmsPyPI · lollms · fixed in 2.2.0
- CVE-2026-1839Arbitrary Code Execution via Unsafe torch.load() in Trainer Checkpoint Loading in huggingface/transformersPyPI · transformers · fixed in 5.0.0, 5.0.0rc3
- CVE-2026-35459pyLoad has SSRF fix bypass via HTTP redirectPyPI · pyload-ng
- CVE-2026-35187pyLoad has SSRF in parse_urls API endpoint via unvalidated URL parameterPyPI · pyload-ng
- CVE-2026-35175Ajenti has an authorization bypass during custom package installationPyPI · ajenti-panel · fixed in 2.2.15
- CVE-2026-35171Arbitrary Code Execution via Malicious Logging Configuration in KedroPyPI · kedro · fixed in 1.3.0
- CVE-2026-35167Kedro has a path traversal in versioned dataset loading via unsanitized version stringPyPI · kedro · fixed in 1.3.0
- CVE-2026-35052D-Tale affected by Remote Code Execution through redis/shelf storagePyPI · dtale · fixed in 3.22.0