Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-34400alerta-server has potential SQL Injection vulnerability in Query String Syntax (q=) APIPyPI · alerta-server · fixed in 9.1.0
- CVE-2026-34203Nautobot: Management of users via REST API does not apply configured password validatorsPyPI · nautobot · fixed in 2.4.30, 3.0.10
- CVE-2026-34231Slippers: Cross-Site Scripting (XSS) in `attrs` Template TagPyPI · slippers · fixed in 0.6.3
- CVE-2026-0596Command Injection in mlflow/mlflowPyPI · mlflow · fixed in 3.9.0
- CVE-2026-34172Giskard Agents have Server-side template injection via ChatWorkflow.chat() using non-sandboxed Jinja2 EnvironmentPyPI · giskard-agents · fixed in 0.3.4, 1.0.2b1
- CVE-2026-34881OpenStack Glance before 29.1.1, 30.x before 30.1.1, and 31.0.0 is affected by Server-Side Request Forgery (SSRF).PyPI · glance · fixed in 29.2.0, 30.2.0, 31.1.0
- CVE-2026-34073cryptography has incomplete DNS name constraint enforcement on peer namesPyPI · cryptography · fixed in 46.0.6
- CVE-2026-34070LangChain Core has Path Traversal vulnerabilites in legacy `load_prompt` functionsPyPI · langchain-core · fixed in 1.2.22
- CVE-2026-32727SciTokens: Authorization Bypass via Path Traversal in Scope ValidationPyPI · scitokens · fixed in 1.9.7
- CVE-2026-32716SciTokens: Authorization Bypass via Incorrect Scope Path Prefix CheckingPyPI · scitokens · fixed in 1.9.6
- CVE-2026-32714SciTokens vulnerable to SQL Injection in KeyCachePyPI · scitokens · fixed in 1.9.6
- CVE-2026-32794Apache Airflow Provider for Databricks: TLS Certificate Verification Disabled in Databricks Provider K8s Token ExchangePyPI · apache-airflow · fixed in 1.12.0
- CVE-2025-15379Command Injection in mlflow/mlflowPyPI · mlflow · fixed in 3.8.1
- CVE-2025-15036Path Traversal Vulnerability in mlflow/mlflowPyPI · mlflow · fixed in 3.9.0rc0
- CVE-2026-0558Unauthenticated File Upload in parisneo/lollmsPyPI · lollms · fixed in 2.1.1
- CVE-2026-0560Server-Side Request Forgery (SSRF) in parisneo/lollmsPyPI · lollms · fixed in 2.1.1
- CVE-2026-0562Insecure Direct Object Reference (IDOR) in parisneo/lollmsPyPI · lollms · fixed in 2.1.1
- CVE-2026-33992pyLoad: Server-Side Request Forgery via Download Link Submission Enables Cloud Metadata ExfiltrationPyPI · pyload-ng
- CVE-2026-33936python-ecdsa: Denial of Service via improper DER length validation in crafted private keysPyPI · ecdsa · fixed in 0.19.2
- CVE-2026-33981Changedetection.io Discloses Environment Variables via jq env Builtin in Include FiltersPyPI · changedetection-io · fixed in 0.54.7
- CVE-2026-33980Azure Data Explorer MCP Server: KQL Injection in multiple tools allows MCP client to execute arbitrary Kusto queriesPyPI · adx-mcp-server
- CVE-2026-34046Langflow: Authenticated Users Can Read, Modify, and Delete Any Flow via Missing Ownership CheckPyPI · langflow, langflow-base · fixed in 1.5.1, 0.5.1
- CVE-2026-33873Langflow has Authenticated Code Execution in Agentic Assistant ValidationPyPI · langflow · fixed in 1.9.0
- CVE-2026-33045Home Assistant has stored XSS in history-graphsPyPI · homeassistant · fixed in 2026.01
- CVE-2026-33044Home Assistant has stored XSS in Map-card through malicious device namePyPI · homeassistant · fixed in 2026.01
- CVE-2026-4963huggingface smolagents Incomplete Fix CVE-2025-9959 local_python_executor.py evaluate_with code injectionPyPI · smolagents
- CVE-2025-15381Unauthorized Access to Tracing and Assessment Endpoints in mlflow/mlflowPyPI · mlflow
- CVE-2026-33744BentoML has Dockerfile Command Injection via system_packages in bentofile.yamlPyPI · bentoml · fixed in 1.4.37
- CVE-2026-33718OpenHands is Vulnerable to Command Injection through its Git Diff HandlerPyPI · openhands-ai · fixed in 1.5.0
- CVE-2026-33699pypdf: Possible infinite loop during recovery attempts in DictionaryObject.read_from_streamPyPI · pypdf · fixed in 6.9.2