Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-27893vLLM's hardcoded trust_remote_code=True in NemotronVL and KimiK25 bypasses user security opt-outPyPI · vllm · fixed in 0.18.0
- CVE-2026-29071Open WebUI's Insecure Direct Object Reference (IDOR) allows access to other users' memoriesPyPI · open-webui · fixed in 0.8.6
- CVE-2026-29070Open WebUI has unauthorized deletion of knowledge filesPyPI · open-webui · fixed in 0.8.6
- CVE-2026-28788Open WebUI's process_files_batch() endpoint missing ownership check, allows unauthorized file overwritePyPI · open-webui · fixed in 0.8.6
- CVE-2026-28786Open WebUI vulnerable to Path Traversal in `POST /api/v1/audio/transcriptions`PyPI · open-webui · fixed in 0.8.6
- CVE-2026-33682Streamlit on Windows has Unauthenticated SSRF Vulnerability (NTLM Credential Exposure)PyPI · streamlit · fixed in 1.54.0
- CVE-2026-33545MobSF has SQL Injection in its SQLite Database Viewer UtilsPyPI · mobsf · fixed in 4.4.6
- CVE-2026-33430Briefcase: Windows MSI Installer Privilege Escalation via Insecure Directory PermissionsPyPI · briefcase · fixed in 0.3.26
- CVE-2026-27602Modoboa has an OS Command InjectionPyPI · modoboa · fixed in 2.7.1
- CVE-2026-25645Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility functionPyPI · requests · fixed in 2.33.0
- CVE-2025-70887An issue in ralphje Signify before v.0.9.2 allows a remote attacker to escalate privileges via the signed_data.py and the context.py componePyPI · signify · fixed in 0.9.2
- CVE-2026-24159NVIDIA NeMo Framework contains a vulnerability where an attacker may cause remote code execution.PyPI · nemo-toolkit · fixed in 2.6.2
- CVE-2026-24157NVIDIA NeMo Framework contains a vulnerability in checkpoint loading where an attacker could cause remote code execution.PyPI · nemo-toolkit · fixed in 2.6.2
- CVE-2026-33332NiceGUI's unvalidated chunk size parameter in media routes can cause memory exhaustionPyPI · nicegui · fixed in 3.9.0
- CVE-2026-33509pyload-ng: SETTINGS Permission Users Can Achieve Remote Code Execution via Unrestricted Reconnect Script ConfigurationPyPI · pyload-ng
- CVE-2026-33314pyload-ng: Improper Authentication and Origin Validation ErrorPyPI · pyload-ng · fixed in 0.5.0b3.dev97
- CVE-2026-33310Intake has a Command Injection via shell() Expansion in Parameter DefaultsPyPI · intake · fixed in 2.0.9
- CVE-2026-33497Langflow: /profile_pictures/{folder_name}/{file_name} endpoint file readingPyPI · langflow · fixed in 1.7.1
- CVE-2026-33484Langflow has Unauthenticated IDOR on Image DownloadsPyPI · langflow · fixed in 1.9.0
- CVE-2026-33309Langflow has an Arbitrary File Write (RCE) via v2 APIPyPI · langflow · fixed in 1.9.0
- CVE-2026-33046Indico discloses local files resulting in Remote Code Execution through LaTeX injectionPyPI · indico · fixed in 3.3.12
- CVE-2026-26209cbor2 has a Denial of Service via Uncontrolled Recursion in cbor2.loadsPyPI · cbor2 · fixed in 5.9.0
- CVE-2026-4539pygments archetype.py AdlLexer redosPyPI · pygments · fixed in 2.20.0
- CVE-2026-4538PyTorch pt2 Loading deserializationPyPI · torch
- CVE-2019-25586Deluge 1.3.15 Denial of Service via URL FieldPyPI · deluge
- CVE-2019-25585Deluge 1.3.15 Denial of Service via Webseeds FieldPyPI · deluge
- CVE-2026-33236NLTK has a Downloader Path Traversal Vulnerability (AFO) - Arbitrary File OverwritePyPI · nltk · fixed in 3.9.4
- CVE-2026-33231NLTK has unauthenticated remote shutdown in nltk.app.wordnet_appPyPI · nltk · fixed in 3.9.4
- CVE-2026-33230nltk Vulnerable to Cross-site ScriptingPyPI · nltk · fixed in 3.9.4
- CVE-2026-4506Mindinventory MindSQL mindsql_core.py ask_db code injectionPyPI · mindsql