Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-35536In Tornado before 6.5.5, cookie attribute injection could occur because the domain, path, and samesite arguments to .RequestHandler.set_cookPyPI · tornado · fixed in 6.5.5
- CVE-2026-34760vLLM: Downmix Implementation Differences as Attack Vectors Against Audio AI ModelsPyPI · vllm · fixed in 0.18.0
- CVE-2026-34730Copier `_external_data` allows path traversal and absolute-path local file read without unsafe modePyPI · copier · fixed in 9.14.1
- CVE-2026-34726Copier `_subdirectory` allows template root escape via parent-directory traversalPyPI · copier · fixed in 9.14.1
- CVE-2026-34591Poetry Has Wheel Path Traversal Which Can Lead to Arbitrary File WritePyPI · poetry · fixed in 2.3.3
- CVE-2026-33641Glances Vulnerable to Command Injection via Dynamic Configuration ValuesPyPI · glances · fixed in 4.5.3
- CVE-2026-33533Glances Vulnerable to Cross-Origin System Information Disclosure via XML-RPC Server CORS WildcardPyPI · glances · fixed in 4.5.3
- CVE-2026-32871FastMCP OpenAPI Provider has an SSRF & Path Traversal VulnerabilityPyPI · fastmcp · fixed in 3.2.0
- CVE-2026-35002Agno < 2.3.24 field_type Eval Injection Arbitrary Code ExecutionPyPI · agno · fixed in 2.3.24
- CVE-2026-34543OpenEXR: Heap information disclosure in PXR24 decompression via unchecked decompressed size (undo_pxr24_impl)PyPI · openexr · fixed in 3.4.8
- CVE-2026-34544OpenEXR: integer overflow to OOB write in uncompress_b44_impl()PyPI · openexr · fixed in 3.4.8
- CVE-2026-34531Flask-HTTPAuth invokes token verification callback when missing or empty token was given by clientPyPI · flask-httpauth · fixed in 4.8.1
- CVE-2026-34525AIOHTTP: Duplicate Host header acceptedPyPI · aiohttp · fixed in 3.13.4
- CVE-2026-34520AIOHTTP: C parser (llhttp) accepts null bytes and control characters in response header values - header injection / security bypassPyPI · aiohttp · fixed in 3.13.4
- CVE-2026-34519AIOHTTP: HTTP response splitting via \r in reason phrasePyPI · aiohttp · fixed in 3.13.4
- CVE-2026-34518AIOHTTP: Cookie and Proxy-Authorization headers leaked on cross-origin redirectPyPI · aiohttp · fixed in 3.13.4
- CVE-2026-34517AIOHTTP: Late size enforcement for non-file multipart fields causes memory DoSPyPI · aiohttp · fixed in 3.13.4
- CVE-2026-34516AIOHTTP: Multipart Header Size BypassPyPI · aiohttp · fixed in 3.13.4
- CVE-2026-34515AIOHTTP: UNC SSRF/NTLMv2 Credential Theft/Local File Read in static resource handler on WindowsPyPI · aiohttp · fixed in 3.13.4
- CVE-2026-34514AIOHTTP: CRLF injection in multipart part content type header constructionPyPI · aiohttp · fixed in 3.13.4
- CVE-2026-22815AIOHTTP: Uncapped memory usage possible through aiohttp allowing unlimited trailer headersPyPI · aiohttp · fixed in 3.13.4
- CVE-2026-34513AIOHTTP: Denial of Service (DoS) via Unbounded DNS Cache in TCPConnectorPyPI · aiohttp · fixed in 3.13.4
- CVE-2026-35000ChangeDetection.io < 0.54.7 SafeXPath3Parser Bypass Arbitrary File ReadPyPI · changedetection-io · fixed in 0.54.7
- CVE-2026-34447ONNX: External Data Symlink TraversalPyPI · onnx · fixed in 1.21.0
- CVE-2026-34446ONNX: Arbitrary File Read via ExternalData Hardlink Bypass in ONNX loadPyPI · onnx · fixed in 1.21.0
- CVE-2026-27489ONNX: Path Traversal via SymlinkPyPI · onnx · fixed in 1.21.0
- CVE-2026-34445ONNX: Malicious ONNX models can crash servers by exploiting unprotected object settings.PyPI · onnx · fixed in 1.21.0
- CVE-2026-34222Open WebUI has Broken Access Control in Tool ValvesPyPI · open-webui · fixed in 0.8.11
- CVE-2026-34450Claude SDK for Python: Insecure Default File Permissions in Local Filesystem Memory ToolPyPI · anthropic · fixed in 0.87.0
- CVE-2026-34452Claude SDK for Python: Memory Tool Path Validation Race Condition Allows Sandbox EscapePyPI · anthropic · fixed in 0.87.0