Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-2705Open Babel MOL2 File atom.h SetFormalCharge out-of-boundsPyPI · openbabel · fixed in 3.2.0
- CVE-2026-2704Open Babel CIF File transform3d.cpp DescribeAsString out-of-boundsPyPI · openbabel · fixed in 3.2.0
- CVE-2026-24126Weblate has an argument injection in management consolePyPI · weblate · fixed in 5.16.0, 5.16
- CVE-2025-14009Zip Slip Vulnerability in nltk/nltk Leading to Remote Code ExecutionPyPI · nltk · fixed in 3.9.3
- CVE-2025-33253NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution by convincing a user to load a maliciouslPyPI · nemo-toolkit · fixed in 2.6.1
- CVE-2025-33245NVIDIA NeMo Framework contains a vulnerability where malicious data could cause remote code execution.PyPI · nemo-toolkit · fixed in 2.6.1
- CVE-2026-2654huggingface smolagents LocalPythonExecutor requests.post server-side request forgeryPyPI · smolagents
- CVE-2026-2653admesh normals.c stl_check_normal_vector heap-based overflowPyPI · admesh · fixed in 0.98.6
- CVE-2026-24708An issue was discovered in OpenStack Nova before 30.2.2, 31 before 31.2.1, and 32 before 32.1.1.PyPI · nova
- CVE-2026-25087Apache Arrow: Potential use-after-free when reading IPC file with pre-bufferingPyPI · pyarrow · fixed in 23.0.1
- CVE-2026-2415Unsafe variable evaluation in email templatesPyPI · pretix · fixed in 2026.1.1, 2025.10.2, 2025.9.4
- CVE-2026-2531MindsDB File Upload security.py clear_filename server-side request forgeryPyPI · mindsdb · fixed in 26.0.0rc1
- CVE-2025-33042Apache Avro Java SDK: Code injection on Java generated codePyPI · avro · fixed in 1.11.5
- CVE-2019-25338Dokuwiki 2018-04-22b - Username EnumerationPyPI · dokuwiki
- CVE-2026-26217Crawl4AI < 0.8.0 Docker API Local File Inclusion via file URL HandlingPyPI · crawl4ai · fixed in 0.8.0
- CVE-2026-26216Crawl4AI < 0.8.0 Docker API Unauthenticated Remote Code Execution via Hooks ParameterPyPI · crawl4ai · fixed in 0.8.0
- CVE-2026-1669Arbitrary File Read in Keras via HDF5 External DatasetsPyPI · keras · fixed in 3.13.2, 3.12.1
- CVE-2026-25990Pillow has an out-of-bounds write when loading PSD imagesPyPI · pillow · fixed in 12.1.1
- CVE-2025-69872DiskCache (python-diskcache) through 5.6.3 uses Python pickle for serialization by default.PyPI · diskcache
- CVE-2026-26013LangChain affected by SSRF via image_url token counting in ChatOpenAI.get_num_tokens_from_messagesPyPI · langchain-core · fixed in 1.2.11
- CVE-2026-26007cryptography Subgroup Attack Due to Missing Subgroup Validation for SECT CurvesPyPI · cryptography · fixed in 46.0.5
- CVE-2026-21531Azure SDK for Python Remote Code Execution VulnerabilityPyPI · azure-ai-language-conversations-authoring · fixed in 1.0.0b4
- CVE-2026-25577Emmett has an Unhandled CookieError Exception Causing Denial of ServicePyPI · emmett-core · fixed in 1.3.11
- CVE-2026-25528LangSmith Client SDK Affected by Server-Side Request Forgery via Tracing Header InjectionPyPI · langsmith · fixed in 0.6.3
- CVE-2026-25480FileStore key canonicalization collisions allow response cache mixup/poisoning (ASCII ord + Unicode NFKD)PyPI · litestar · fixed in 2.20.0
- CVE-2026-25479Litestar has an AllowedHosts validation bypass due to unescaped regex metacharacters in configured host patternsPyPI · litestar · fixed in 2.20.0
- CVE-2026-25478Litestar has a CORS origin allowlist bypass due to unescaped regex metacharacters in allowed originsPyPI · litestar · fixed in 2.20.0
- CVE-2026-22922Apache Airflow: Airflow externalLogUrl Permission BypassPyPI · apache-airflow, apache-airflow-core · fixed in 3.1.7
- CVE-2026-24098Apache Airflow: Assigning single DAG permission leaked all DAGs Import ErrorsPyPI · apache-airflow, apache-airflow-core · fixed in 3.1.7
- CVE-2026-25905Lack of isolation in mcp-run-python leads to MCP server takeoverPyPI · mcp-run-python