Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-28413Products.isurlinportal: Possible open redirect when using more than 2 forward slashesPyPI · products-isurlinportal · fixed in 4.0.0, 3.1.0, 2.1.0
- CVE-2026-28350lxml_html_clean: <base> tag injection through default Cleaner configurationPyPI · lxml-html-clean · fixed in 0.4.4
- CVE-2026-28348lxml_html_clean: CSS @import Filter Bypass via Unicode EscapesPyPI · lxml-html-clean · fixed in 0.4.4
- CVE-2026-28277LangGraph: Unsafe msgpack deserialization in LangGraph checkpoint loadingPyPI · langgraph · fixed in 1.0.10rc1, 1.0.10
- CVE-2026-28222Wagtail: Improper escaping of HTML (Cross-site Scripting) on TableBlock class attributesPyPI · wagtail · fixed in 6.3.8, 7.0.6, 7.2.3 and more
- CVE-2026-28223Wagtail: Improper escaping of HTML (Cross-site Scripting) in simple_translation admin interfacePyPI · wagtail · fixed in 6.3.8, 7.0.6, 7.2.3 and more
- CVE-2026-25048xgrammar: Multi-layer nesting causes DoSPyPI · xgrammar · fixed in 0.1.32
- CVE-2026-27982An open redirect vulnerability exists in django-allauth versions prior to 65.14.1 when SAML IdP initiated SSO is enabled (it is disabled by PyPI · django-allauth · fixed in 65.14.1
- CVE-2025-45691An Arbitrary File Read vulnerability exists in the ImageTextPromptValue class in Exploding Gradients RAGAS v0.2.3 to v0.2.14.PyPI · ragas · fixed in 0.3.0-rc1
- CVE-2025-69534Python-Markdown version 3.8 contain a vulnerability where malformed HTML-like sequences can cause html.parser.HTMLParser to raise an…PyPI · markdown · fixed in 3.8.1
- CVE-2026-0847Path Traversal in nltk/nltkPyPI · nltk
- CVE-2026-27932joserfc PBES2 p2c Unbounded Iteration Count enables Denial of Service (DoS)PyPI · joserfc · fixed in 1.6.3
- CVE-2026-27905BentoML has an Arbitrary File Write via Symlink Path Traversal in Tar ExtractionPyPI · bentoml · fixed in 1.4.36
- CVE-2026-27622OpenEXR CompositeDeepScanLine integer-overflow leads to heap OOB writePyPI · openexr · fixed in 3.2.6, 3.3.8, 3.4.6
- CVE-2026-28518OpenViking .ovpack Import ZIP Slip Path TraversalPyPI · openviking
- CVE-2026-25674Potential incorrect permissions on newly created file system objectsPyPI · django · fixed in 6.0.3, 5.2.12, 4.2.29
- CVE-2026-25673Potential denial-of-service vulnerability in URLField via Unicode normalization on WindowsPyPI · django · fixed in 4.2.29, 5.2.12, 6.0.3
- CVE-2026-2256Command injection vulnerability in ModelScope's ms-agentPyPI · ms-agent
- CVE-2026-3408Open Babel CDXML File atom.cpp GetExplicitValence null pointer dereferencePyPI · openbabel · fixed in 3.2.0
- CVE-2026-28416Gradio has SSRF via Malicious `proxy_url` Injection in `gr.load()` Config ProcessingPyPI · gradio · fixed in 6.6.0
- CVE-2026-28415Gradio has Open Redirect in OAuth FlowPyPI · gradio · fixed in 6.6.0
- CVE-2026-28414Gradio has Absolute Path Traversal on Windows with Python 3.13+PyPI · gradio · fixed in 6.7.0
- CVE-2026-27167Gradio: Mocked OAuth Login Exposes Server Credentials and Uses Hardcoded Session SecretPyPI · gradio · fixed in 6.6.0
- CVE-2026-28352Indico missing access check in event series management APIPyPI · indico · fixed in 3.3.11
- CVE-2026-28351Manipulated RunLengthDecode streams can exhaust RAMPyPI · pypdf · fixed in 6.7.4
- CVE-2026-28231pillow_heif Has Integer Overflow in Encode Path Buffer Validation that Leads to Heap Out-of-Bounds ReadPyPI · pi-heif, pillow-heif · fixed in 1.3.0
- CVE-2025-13327Uv: uv: specially crafted zip archives lead to arbitrary code execution due to parsing differentialsPyPI · uv · fixed in 0.9.6
- CVE-2026-28370In the query parser in OpenStack Vitrage before 12.0.1, 13.0.0, 14.0.0, and 15.0.0, a user allowed to access the Vitrage API may trigger codPyPI · vitrage · fixed in 15.0.1, 14.0.1, 13.0.1 and more
- CVE-2026-27839wger: IDOR in nutritional_values endpoints exposes private dietary data via direct ORM lookupPyPI · wger
- CVE-2026-27838wger: IDOR via user-unscoped cache keys on routine API actions exposes workout dataPyPI · wger