Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-33155DeepDiff has Memory Exhaustion DoS through SAFE_TO_IMPORTPyPI · deepdiff · fixed in 8.6.2
- CVE-2026-33154dynaconf Affected by Remote Code Execution (RCE) via Insecure Template Evaluation in @jinja ResolverPyPI · dynaconf · fixed in 3.2.13
- CVE-2026-33140PySpector: Stored XSS in PySpector HTML Report Generation leads to Javascript Code ExecutionPyPI · pyspector · fixed in 0.1.7
- CVE-2026-33139PySpector: Plugin Sandbox Bypass leads to Arbitrary Code ExecutionPyPI · pyspector · fixed in 0.1.7
- CVE-2026-33010mcp-memory-service's Wildcard CORS with Credentials Enables Cross-Origin Memory TheftPyPI · mcp-memory-service · fixed in 10.25.1
- CVE-2026-33125Frigate Broken Access Control: Users assigned the viewer role can delete admin and other low-privileged accountsPyPI · frigate · fixed in 0.16.3
- CVE-2026-33123pypdf has inefficient decoding of array-based streamsPyPI · pypdf · fixed in 6.9.1
- CVE-2026-33057Mesop Affected by Unauthenticated Remote Code Execution via Test Suite Route /exec-pyPyPI · mesop · fixed in 1.2.3
- CVE-2026-33054Mesop: Path Traversal utilizing `FileStateSessionBackend` leads to Application Denial of Service and File Write/DeletionPyPI · mesop · fixed in 1.2.3
- CVE-2026-33053Langflow has Missing Ownership Verification in API Key Deletion (IDOR)PyPI · langflow · fixed in 1.9.0
- CVE-2026-33017Langflow has Unauthenticated Remote Code Execution via Public Flow Build EndpointPyPI · langflow · fixed in 1.9.0
- CVE-2026-32889tinytag: Denial of Service via non-terminating SYLT frame parsing loopPyPI · tinytag · fixed in 2.2.1
- CVE-2026-32875UltraJSON has an integer overflow handling large indent leads to buffer overflow or infinite loopPyPI · ujson · fixed in 5.12.0
- CVE-2026-32874UltraJSON has a Memory Leak parsing large integers allows DoSPyPI · ujson · fixed in 5.12.0
- CVE-2026-32711pydicom: Path traversal in FileSet/DICOMDIR ReferencedFileID allows file access outside the File-set rootPyPI · pydicom · fixed in 3.0.2, 2.4.5
- CVE-2026-27953ormar has a Pydantic Validation Bypass via Kwargs Injection in Model ConstructorPyPI · ormar · fixed in 0.23.1
- CVE-2026-3029CVE-2026-3029PyPI · pymupdf · fixed in 1.26.7
- CVE-2025-15031Path Traversal Vulnerability in mlflow/mlflowPyPI · mlflow · fixed in 3.9.0rc0
- CVE-2026-32722Memray-generated HTML reports vulnerable to Stored XSS via unescaped command-line metadataPyPI · memray · fixed in 1.19.2
- CVE-2026-32634Glances Central Browser Autodiscovery Leaks Reusable Credentials to Zeroconf-Spoofed ServersPyPI · glances · fixed in 4.5.2
- CVE-2026-32633Glances's Browser API Exposes Reusable Downstream Credentials via `/api/4/serverslist`PyPI · glances · fixed in 4.5.2
- CVE-2026-32632Glances's REST/WebUI Lacks Host Validation and Remains Exposed to DNS RebindingPyPI · glances · fixed in 4.5.2
- CVE-2026-32611Glances has a SQL Injection in DuckDB Export via Unparameterized DDL StatementsPyPI · glances · fixed in 4.5.2
- CVE-2026-32610Glances's Default CORS Configuration Allows Cross-Origin Credential TheftPyPI · glances · fixed in 4.5.2
- CVE-2026-32609Glances has Incomplete Secrets Redaction: /api/v4/args Endpoint Leaks Password Hash and SNMP CredentialsPyPI · glances · fixed in 4.5.2
- CVE-2026-32608Glances has a Command Injection via Process Names in Action Command TemplatesPyPI · glances · fixed in 4.5.2
- CVE-2026-32596Glances exposes the REST API without authenticationPyPI · glances · fixed in 4.5.2
- CVE-2026-30922pyasn1 Vulnerable to Denial of Service via Unbounded RecursionPyPI · pyasn1 · fixed in 0.6.3
- CVE-2026-28500ONNX Untrusted Model Repository Warnings Suppressed by silent=True in onnx.hub.load() — Silent Supply-Chain AttackPyPI · onnx · fixed in 1.21.0rc1
- CVE-2026-27459pyOpenSSL DTLS cookie callback buffer overflowPyPI · pyopenssl · fixed in 26.0.0