Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-114386Pydantic AI Harness before 0.59.0 CodeMode Tool Call Limit Bypass via run_codePyPI · pydantic-ai-harness · fixed in 0.59.0
- CVE-2026-114110Astral uv before 0.11.6 Arbitrary File Deletion via Wheel RECORD EntriesPyPI · uv · fixed in 0.11.6
- CVE-2026-114109uv before 0.11.15 Arbitrary File Write via Entry Point NamesPyPI · uv · fixed in 0.11.15
- CVE-2026-114108HKUDS Vibe-Trading before 0.1.7 Missing Authentication in FastAPI Server Enabling RCEPyPI · vibe-trading-ai · fixed in 0.1.7
- CVE-2026-114107HKUDS Vibe-Trading 0.1.0 before 0.1.7 Indirect Prompt Injection RCE via BashTool and BackgroundRunToolPyPI · vibe-trading-ai · fixed in 0.1.7
- CVE-2026-114106HKUDS Vibe-Trading 0.1.0 before 0.1.7 Path Traversal via read_document and safe_user_pathPyPI · vibe-trading-ai · fixed in 0.1.7
- CVE-2026-114098Dulwich 0.22.5 before 1.2.8 Path Traversal via Stash Pop SymlinksPyPI · dulwich · fixed in 1.2.8
- CVE-2026-114097Dulwich 0.23.1 before 1.2.8 Symlink Path Traversal via filter_branch Index FilterPyPI · dulwich · fixed in 1.2.8
- CVE-2026-114096Dulwich 0.24.0 before 1.2.8 Symlink Write-Through via porcelain.checkout pathsPyPI · dulwich · fixed in 1.2.8
- CVE-2026-114095Dulwich before 1.2.9 Infinite Loop DoS via Pack.resolve_objectPyPI · dulwich · fixed in 1.2.9
- CVE-2026-114094Dulwich before 1.2.9 Arbitrary File Write via DOS drive letter pathsPyPI · dulwich · fixed in 1.2.9
- CVE-2026-114055vLLM 0.7.3 before 0.31.0 DoS via Unvalidated mm_processor_kwargsPyPI · vllm · fixed in 0.31.0
- CVE-2026-114054vLLM before 0.31.0 Cross-Request Cache Aliasing via EXIF ImageID and Prefix-Cache KeysPyPI · vllm · fixed in 0.31.0
- CVE-2026-114053vLLM 0.7.3 before 0.31.0 RCE via mm_processor_kwargs.code_revisionPyPI · vllm · fixed in 0.31.0
- CVE-2026-114052vLLM 0.25.0 before 0.31.0 MOSS-Audio Memory Exhaustion via /tokenize mm_processor_kwargsPyPI · vllm · fixed in 0.31.0
- CVE-2026-114050vLLM before 0.31.0 Remote Engine Crash via Forged Multimodal UUIDPyPI · vllm · fixed in 0.31.0
- CVE-2021-48020Vyper before 0.3.0 Memory Corruption via Internal Function Calls in ArraysPyPI · vyper · fixed in 0.2.12
- CVE-2021-48019Vyper before 0.2.9 Incorrect RETURNDATASIZE in create_forwarder_to ProxiesPyPI · vyper · fixed in 0.2.9
- CVE-2021-48018Vyper 0.2.13 before 0.2.15 Storage Corruption via @nonreentrant DecoratorPyPI · vyper · fixed in 0.2.15
- CVE-2020-37289Vyper before 0.3.1 Improper Input Validation of uint8 Interface Return ValuesPyPI · vyper
- CVE-2020-37288Vyper 0.1.0b10 before 0.2.3 Invalid Jump Destination via Return in Nested LoopsPyPI · vyper · fixed in 0.2.3
- CVE-2020-37287Vyper before 0.2.6 Call Stack Corruption via Complex Type Function ArgumentsPyPI · vyper · fixed in 0.2.6
- CVE-2020-37286Vyper 0.1.0b4 before 0.3.0 Memory Corruption via Nested Internal Function CallsPyPI · vyper · fixed in 0.2.6
- CVE-2026-113726virtualenv activate runs commands from the environment name in zsh with PROMPT_SUBSTPyPI · virtualenv · fixed in 21.14.4
- CVE-2026-113776virtualenv activation scripts run code from a path that contains a placeholder namePyPI · virtualenv · fixed in 21.14.2
- CVE-2026-113732virtualenv activate.fish runs commands from a path or prompt with a backslash before a quotePyPI · virtualenv · fixed in 21.14.2
- PYSEC-2026-4320certifi bundles emSign root CAs with compromised intermediate CA keysPyPI · certifi · fixed in 2026.10.18
- CVE-2026-113731djust: Arbitrary absolute-path file read in the find_handlers_for_template MCP toolPyPI · djust · fixed in 1.0.10, 1.1.7, 1.2.4 and more
- CVE-2026-113725virtualenv bash activate runs commands from an environment name with a backslash before $PyPI · virtualenv · fixed in 21.14.7
- CVE-2026-113724virtualenv: Deletion recovery can change a symlink target's modePyPI · virtualenv · fixed in 21.14.9