Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-25904Overly permissive Deno configuration in mcp-run-python leads to SSRFPyPI · mcp-run-python
- CVE-2026-25516NiceGUI's XSS vulnerability in ui.markdown() allows arbitrary JavaScript execution through unsanitized HTML contentPyPI · nicegui · fixed in 3.7.0
- CVE-2026-25732NiceGUI's Path Traversal via Unsanitized FileUpload.name Enables Arbitrary File WritePyPI · nicegui · fixed in 3.7.0
- CVE-2026-25580Pydantic AI Affected by Server-Side Request Forgery (SSRF) in URL Download HandlingPyPI · pydantic-ai, pydantic-ai-slim · fixed in 1.56.0
- CVE-2026-25592Semantic Kernel has an Arbitrary File Write via AI Agent Function Calling in .NET SDKPyPI · semantic-kernel · fixed in 1.39.3
- CVE-2026-25632EPyT-Flow has unsafe JSON deserialization (__type__)PyPI · epyt-flow · fixed in 0.16.1
- CVE-2026-25640Pydantic AI affected by Stored XSS via Path Traversal in Web UI CDN URLPyPI · pydantic-ai, pydantic-ai-slim · fixed in 1.51.0
- CVE-2026-1709Keylime: keylime: authentication bypass allows unauthorized administrative operations due to missing client-side tls authenticationPyPI · keylime · fixed in 7.12.2, 7.13.1, 7.12.0
- CVE-2026-25650MCP Salesforce Connector has arbitrary attribute access which leads to disclosure of Salesforce auth tokenPyPI · mcp-salesforce-connector · fixed in 0.1.10
- CVE-2026-1707Restore restriction bypass via key disclosure vulnerability (pgAdmin 4)PyPI · pgadmin4 · fixed in 9.12
- CVE-2026-25198web2py versions 2.27.1-stable+timestamp.2023.11.16.08.03.57 and prior contain an open redirect vulnerability.PyPI · web2py · fixed in 3.1.1
- CVE-2026-25517Wagtail has improper permission handling on admin preview endpointsPyPI · wagtail · fixed in 6.3.6, 7.0.4, 7.1.3 and more
- CVE-2026-25505Bambuddy Uses Hardcoded Secret Key + Many API Endpoints do not Require AuthenticationPyPI · bambuddy · fixed in 0.1.7
- CVE-2026-25481Langroid has WAF Bypass Leading to RCE in TableChatAgentPyPI · langroid · fixed in 0.59.32
- CVE-2025-64712Unstructured has Path Traversal via Malicious MSG Attachment that Allows Arbitrary File WritePyPI · unstructured · fixed in 0.18.18
- CVE-2025-14550Potential denial-of-service vulnerability via repeated headers when using ASGIPyPI · django · fixed in 4.2.28, 5.2.11, 6.0.2
- CVE-2026-1312Potential SQL injection via QuerySet.order_by and FilteredRelationPyPI · django · fixed in 6.0.2, 5.2.11, 4.2.28
- CVE-2026-1287Potential SQL injection in column aliases via control charactersPyPI · django · fixed in 6.0.2, 5.2.11, 4.2.28
- CVE-2026-1285Potential denial-of-service vulnerability in django.utils.text.Truncator HTML methodsPyPI · django · fixed in 4.2.28, 5.2.11, 6.0.2
- CVE-2026-1207Potential SQL injection via raster lookups on PostGISPyPI · django · fixed in 6.0.2, 5.2.11, 4.2.28
- CVE-2025-13473Username enumeration through timing difference in mod_wsgi authentication handlerPyPI · django · fixed in 4.2.28, 5.2.11, 6.0.2
- CVE-2025-70559pdfminer.six before 20251230 contains an insecure deserialization vulnerability in the CMap loading mechanism.PyPI · pdfminer-six · fixed in 20251230
- CVE-2025-70560Boltz 2.0.0 contains an insecure deserialization vulnerability in its molecule loading functionality.PyPI · boltz
- CVE-2025-69207Khoj has an IDOR in Notion OAuth Flow Enables Index PoisoningPyPI · khoj
- CVE-2026-22778vLLM leaks a heap address when PIL throws an errorPyPI · vllm · fixed in 0.14.1
- CVE-2026-1778TLS disabled by default in select aws/sagemaker-python-sdk configurationsPyPI · sagemaker · fixed in 2.256.0, 3.1.1
- CVE-2026-1777Cleartext transmission of sensitive materials in aws/sagemaker-python-sdkPyPI · sagemaker · fixed in 2.256.0, 3.2.0
- CVE-2026-1703Limited path traversal when installing wheel archivesPyPI · pip · fixed in 26.0
- CVE-2026-0599Unbounded External Image Fetch in Validation Leads to Resource-Exhaustion DoS in huggingface/text-generation-inferencePyPI · text-generation · fixed in 3.3.7
- CVE-2024-5986Remote Arbitrary File Write with Arbitrary Data in h2oai/h2o-3PyPI · h2o