Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-23983Apache Superset: Sensitive Data Exposure via REST API (disabled by default)PyPI · apache-superset · fixed in 6.0.0
- CVE-2026-23984Apache Superset: SQLLab Read-Only Bypass on PostgreSQLPyPI · apache-superset · fixed in 6.0.0
- CVE-2025-27555Apache Airflow: Connection Secrets not masked in UI when Connection are added via Airflow cliPyPI · apache-airflow · fixed in 2.11.1
- CVE-2024-56373Apache Airflow: SSTI to Code Execution in Airflow through Shared DB InformationPyPI · apache-airflow · fixed in 2.11.1
- CVE-2026-26981OpenEXR has heap-buffer-overflow via signed integer underflow in ImfContextInit.cppPyPI · openexr · fixed in 3.3.7, 3.4.5
- CVE-2026-26331yt-dlp: Arbitrary Command Injection when using the `--netrc-cmd` optionPyPI · yt-dlp · fixed in 2026.02.21
- CVE-2026-26198ormar is vulnerable to SQL Injection through aggregate functions min() and max()PyPI · ormar · fixed in 0.23.0
- CVE-2026-2970datapizza-labs datapizza-ai cache.py RedisCache deserializationPyPI · datapizza-ai-core
- CVE-2026-2969datapizza-labs datapizza-ai Jinja2 Template prompt.py ChatPromptTemplate special elements used in a template enginePyPI · datapizza-ai-core
- CVE-2026-27482Ray: Dashboard DELETE endpoints allow unauthenticated browser-triggered DoS (Serve shutdown / job deletion)PyPI · ray · fixed in 2.54.0
- CVE-2026-27469Isso: Stored XSS via comment website fieldPyPI · isso · fixed in 0.13.2
- CVE-2026-27205Flask session does not add `Vary: Cookie` header when accessed in some waysPyPI · flask · fixed in 3.1.3
- CVE-2026-27199Werkzeug safe_join() allows Windows special device namesPyPI · werkzeug · fixed in 3.1.6
- CVE-2026-27197Sentry: Improper Authentication on SAML SSO process allows user identity linkingPyPI · sentry · fixed in 26.2.0
- CVE-2026-27194D-Tale affected by Remote Code Execution through the /save-column-filter endpointPyPI · dtale · fixed in 3.20.0
- CVE-2025-65995Apache Airflow: Disclosure of secrets to UI via kwargsPyPI · apache-airflow, apache-airflow-core · fixed in 2.11.1, 3.1.5rc1, 3.1.4
- CVE-2026-2635MLflow Use of Default Password Authentication Bypass VulnerabilityPyPI · mlflow · fixed in 3.8.0rc0
- CVE-2026-2033MLflow Tracking Server Artifact Handler Directory Traversal Remote Code Execution VulnerabilityPyPI · mlflow · fixed in 3.8.0rc0
- CVE-2026-27026pypdf possibly has long runtimes for malformed FlateDecode streamsPyPI · pypdf · fixed in 6.7.1
- CVE-2026-27025pypdf has possible long runtimes/large memory usage for large /ToUnicode streamsPyPI · pypdf · fixed in 6.7.1
- CVE-2026-27024pypdf has a possible infinite loop when processing TreeObjectPyPI · pypdf · fixed in 6.7.1
- CVE-2026-2473Bucket Squatting in Vertex AI Experiments leads to RCE and Model Theft.PyPI · google-cloud-aiplatform · fixed in 1.133.0
- CVE-2026-2472Stored Cross-Site Scripting (XSS) in Vertex AI Python SDK VisualizationPyPI · google-cloud-aiplatform · fixed in 1.131.0
- CVE-2026-26193Open WebUI vulnerable to Stored XSS via iFrame embeds in response messagesPyPI · open-webui · fixed in 0.6.44
- CVE-2026-26192Open WebUI vulnerable to Stored XSS via iFrame in citations modelPyPI · open-webui · fixed in 0.7.0
- CVE-2026-26057Skill Scanner Unsecured Network Binding VulnerabilityPyPI · cisco-ai-skill-scanner · fixed in 1.0.2
- CVE-2026-26030Microsoft Semantic Kernel InMemoryVectorStore filter functionality vulnerable to remote code executionPyPI · semantic-kernel · fixed in 1.39.4
- CVE-2026-25739Indico affected by Cross-Site-Scripting via material uploadsPyPI · indico · fixed in 3.3.10
- CVE-2026-25738Indico has Server-Side Request Forgery (SSRF) in multiple placesPyPI · indico · fixed in 3.3.10
- CVE-2026-25527changedetection.io vulnerable to unauthenticated static path traversalPyPI · changedetection-io · fixed in 0.53.2