Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-27448pyOpenSSL allows TLS connection bypass via unhandled callback exception in set_tlsext_servername_callbackPyPI · pyopenssl · fixed in 26.0.0
- CVE-2026-32981Ray Dashboard <= 2.8.0 Path Traversal Leading to Local File DisclosurePyPI · ray · fixed in 2.8.1
- CVE-2026-21886OpenCTI's GraphQL Mutations Allow Deletion of Unrelated EntitiesPyPI · pycti · fixed in 6.9.1
- CVE-2026-28563Apache Airflow: DAG authorization bypassPyPI · apache-airflow, apache-airflow-core · fixed in 3.1.8
- CVE-2026-26929Apache Airflow: Wildcard DagVersion Listing Bypasses Per‑DAG RBAC and Leaks MetadataPyPI · apache-airflow, apache-airflow-core · fixed in 3.1.8
- CVE-2026-30911Apache Airflow: Execution API HITL Endpoints Missing Per-Task AuthorizationPyPI · apache-airflow, apache-airflow-core · fixed in 3.1.8
- CVE-2026-28779Apache Airflow: Path of session token in cookie does not consider base_url - session hijacking via co-hosted applicationsPyPI · apache-airflow, apache-airflow-core · fixed in 3.1.8
- CVE-2025-69196FastMCP OAuth Proxy token reuse across MCP serversPyPI · fastmcp · fixed in 2.14.2
- CVE-2026-4269Improper S3 ownership verification in Bedrock AgentCore Starter ToolkitPyPI · bedrock-agentcore-starter-toolkit · fixed in 0.1.13
- CVE-2026-28498Authlib: Fail-Open Cryptographic Verification in OIDC Hash BindingPyPI · authlib · fixed in 1.6.9
- CVE-2026-28490Authlib Vulnerable to JWE RSA1_5 Bleichenbacher Padding OraclePyPI · authlib · fixed in 1.6.9
- CVE-2026-27962Authlib JWS JWK Header Injection: Signature Verification BypassPyPI · authlib · fixed in 1.6.9
- CVE-2026-4270AWS API MCP File Access Restriction BypassPyPI · awslabs-aws-api-mcp-server · fixed in 1.3.9
- CVE-2026-4229vanna-ai vanna bigquery_vector.py remove_training_data sql injectionPyPI · vanna
- CVE-2025-14287Command Injection in mlflow/mlflowPyPI · mlflow · fixed in 3.8.0rc0
- CVE-2026-32640(SimpleEval) Objects (including modules) can leak dangerous modules through to direct access inside the sandbox.PyPI · simpleeval · fixed in 1.0.5
- CVE-2026-31899CairoSVG vulnerable to Exponential DoS via recursive <use> element amplificationPyPI · cairosvg · fixed in 2.9.0
- CVE-2026-32597PyJWT accepts unknown `crit` header extensions (RFC 7515 §4.1.11 MUST violation)PyPI · pyjwt · fixed in 2.12.0
- CVE-2026-32274Black: Arbitrary file writes from unsanitized user input in cache file namePyPI · black · fixed in 26.3.1
- CVE-2026-32247Graphiti vulnerable to Cypher Injection via unsanitized node_labels in search filtersPyPI · graphiti-core · fixed in 0.28.2
- CVE-2026-32116Magic Wormhole: "wormhole receive" allows arbitrary local file overwritePyPI · magic-wormhole · fixed in 0.23.0
- CVE-2026-21887OpenCTI has a Semi-Blind SSRF via Unvalidated External URL in Data Ingestion FeaturePyPI · pycti · fixed in 6.8.16
- CVE-2026-28356ReDoS in multipart 1.3.0 - `parse_options_header()`PyPI · multipart · fixed in 1.3.1, 1.2.2
- CVE-2026-3989CVE-2026-3989PyPI · sglang · fixed in 0.5.10
- CVE-2026-3060CVE-2026-3060PyPI · sglang · fixed in 0.5.10
- CVE-2026-3059CVE-2026-3059PyPI · sglang · fixed in 0.5.10
- CVE-2026-32112ha-mcp has XSS via Unescaped HTML in OAuth Consent FormPyPI · ha-mcp · fixed in 7.0.0
- CVE-2026-32111ha-mcp OAuth 2.1 DCR mode enables network reconnaissance via an error oraclePyPI · ha-mcp · fixed in 7.0.0
- CVE-2026-32109Copyparty has unexpected JavaScript execution via crafted URL to folder with `.prologue.html`PyPI · copyparty · fixed in 1.20.12
- CVE-2026-32108Copyparty ftp/sftp: Sharing a single file did not fully restrict source-folder accessPyPI · copyparty · fixed in 1.20.12