Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-35044BentoML has a Server-Side Template Injection via unsandboxed Jinja2 Environment in Dockerfile generationPyPI · bentoml · fixed in 1.4.38
- CVE-2026-35043BentoML: command injection in cloud deployment setup script (deployment.py)PyPI · bentoml · fixed in 1.4.38
- CVE-2026-35030LiteLLM has an authentication bypass via OIDC userinfo cache key collisionPyPI · litellm · fixed in 1.83.0
- CVE-2026-35029LiteLLM affected by privilege escalation via unrestricted proxy configuration endpointPyPI · litellm · fixed in 1.83.0
- CVE-2026-34756vLLM Affected by Unauthenticated OOM Denial of Service via Unbounded `n` Parameter in OpenAI API ServerPyPI · vllm · fixed in 0.19.0
- CVE-2026-34755vLLM Affected by Denial of Service via Unbounded Frame Count in video/jpeg Base64 ProcessingPyPI · vllm · fixed in 0.19.0
- CVE-2026-34753vLLM affected by Server-Side Request Forgery (SSRF) in `download_bytes_from_url `PyPI · vllm · fixed in 0.19.0
- CVE-2026-34589OpenEXR: DWA Lossy Decoder Heap Out-of-Bounds WritePyPI · openexr · fixed in 3.2.7, 3.3.9, 3.4.9
- CVE-2026-34588OpenEXR has a signed 32-bit Overflow in PIZ Decoder Leads to OOB Read/WritePyPI · openexr · fixed in 3.2.7, 3.3.9, 3.4.9
- CVE-2026-34444Lupa has a Sandbox escape and RCE due to incomplete attribute_filter enforcement in getattr / setattrPyPI · lupa
- CVE-2026-33752Redirect-based SSRF leading to internal network access in curl_cffi (with TLS impersonation bypass)PyPI · curl-cffi · fixed in 0.15.0
- CVE-2026-5559AntaresMugisho PyBlade AST Validation sandbox.py _is_safe_ast special elements used in a template enginePyPI · pyblade
- CVE-2026-34955PraisonAI: Sandbox Escape via shell=True and Bypassable Blocklist in SubprocessSandboxPyPI · praisonai · fixed in 4.5.97
- CVE-2026-34954PraisonAI: SSRF in FileTools.download_file() via Unvalidated URLPyPI · praisonaiagents · fixed in 1.5.95
- CVE-2026-34953PraisonAI: Authentication Bypass in OAuthManager.validate_token()PyPI · praisonai · fixed in 4.5.97
- CVE-2026-34952PraisonAI: Missing Authentication in WebSocket GatewayPyPI · praisonai · fixed in 4.5.97
- CVE-2026-34939PraisonAI: ReDoS via Unvalidated User-Controlled Regex in MCPToolIndex.search_tools()PyPI · praisonai · fixed in 4.5.90
- CVE-2026-34938PraisonAI: Python Sandbox Escape via str Subclass startswith() Override in execute_codePyPI · praisonaiagents · fixed in 1.5.90
- CVE-2026-34937PraisonAI: Shell Injection in run_python() via Unescaped $() SubstitutionPyPI · praisonaiagents · fixed in 1.5.90
- CVE-2026-34936PraisonAI: SSRF via Unvalidated api_base in passthrough() FallbackPyPI · praisonai · fixed in 4.5.90
- CVE-2026-34934PraisonAI: Second-Order SQL Injection in `get_all_user_threads`PyPI · praisonai · fixed in 4.5.90
- CVE-2026-34935PraisonAI: OS Command Injection in MCPHandler.parse_mcp_command()PyPI · praisonai · fixed in 4.5.69
- CVE-2026-34824Mesop: Unbounded Thread Creation in WebSocket Handler Leads to Denial of ServicePyPI · mesop · fixed in 1.2.5
- CVE-2026-34052LTI JupyterHub Authenticator: Unbounded Memory Growth via Nonce Storage (Denial of Service)PyPI · jupyterhub-ltiauthenticator · fixed in 1.6.3
- CVE-2026-33709JupyterHub has an Open Redirect VulnerabilityPyPI · jupyterhub · fixed in 5.4.4
- CVE-2026-33175OAuthenticator: Authentication Bypass in Auth0OAuthenticator via Unverified Email ClaimsPyPI · oauthenticator · fixed in 17.4.0
- CVE-2026-0545Missing Authentication for Critical Function in mlflow/mlflowPyPI · mlflow
- CVE-2026-27124FastMCP: Missing Consent Verification in OAuth Proxy Callback Facilitates Confused Deputy VulnerabilitiesPyPI · fastmcp · fixed in 3.2.0
- CVE-2025-64340FastMCP has a Command Injection vulnerability - Gemini CLIPyPI · fastmcp · fixed in 3.2.0
- CVE-2026-5463pymetasploit3 - Command Injection via Newline Injection in console.run_module_with_output()PyPI · pymetasploit3