Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2025-6208Uncontrolled Memory Consumption in run-llama/llama_indexPyPI · llama-index-core · fixed in 0.12.41
- CVE-2025-10279Privilege Escalation in mlflow/mlflowPyPI · mlflow · fixed in 3.4.0rc0
- CVE-2026-1117Improper Access Control in parisneo/lollmsPyPI · lollms · fixed in 2.1.0
- CVE-2025-70959A stored cross-site scripting (XSS) vulnerability in the Jobs module of Tendenci CMS v15.3.7 allows attackers to execute arbitrary web scripPyPI · tendenci
- CVE-2025-70960A stored cross-site scripting (XSS) vulnerability in the Forums module of Tendenci CMS v15.3.7 allows attackers to execute arbitrary web scrPyPI · tendenci
- CVE-2020-37044OpenCTI 3.3.1 - Cross Site ScriptingPyPI · pycti
- CVE-2020-37041OpenCTI 3.3.1 - Directory TraversalPyPI · pycti
- CVE-2026-25130Cybersecurity AI vulnerable to command Injection through argument injection in find_file Agent toolPyPI · cai-framework
- CVE-2025-62349Salt Master authentication protocol downgrade may enable minion impersonationPyPI · salt · fixed in 3006.17, 3007.9
- CVE-2025-62348Salt junos module uses an unsafe YAML loader which may allow unintended code executionPyPI · salt · fixed in 3006.17
- CVE-2026-25211Llama Stack (aka llama-stack) before 0.4.0rc3 does not censor the pgvector password in the initialization log.PyPI · llama-stack · fixed in 0.4.4
- CVE-2025-69662SQL injection vulnerability in geopandas before v.1.1.2 allows an attacker to obtain sensitive information via the to_postgis()` function bePyPI · geopandas · fixed in 1.1.2
- CVE-2026-24780AutoGPT is Vulnerable to RCE via Disabled Block ExecutionPyPI · agpt
- CVE-2020-36962Tendenci 12.3.1 - CSV/ Formula InjectionPyPI · tendenci · fixed in 12.3.2
- CVE-2026-24779vLLM vulnerable to Server-Side Request Forgery (SSRF) in `MediaConnector`PyPI · vllm · fixed in 0.14.1
- CVE-2026-24747PyTorch Vulnerable to Remote Code Execution via Untrusted Checkpoint FilesPyPI · pytorch, torch · fixed in 2.10.0
- CVE-2026-24688pypdf has possible Infinite Loop when processing outlines/bookmarksPyPI · pypdf · fixed in 6.6.2
- CVE-2026-23892OctoPrint has Timing Side-Channel Vulnerability in API Key AuthenticationPyPI · octoprint · fixed in 1.11.6
- CVE-2026-1213Askbot 0.12.2 - Insecure Direct Object Reference (IDOR)PyPI · askbot · fixed in 0.12.3
- CVE-2026-24490MobSF has Stored XSS via Manifest Analysis - Dialer Code Host FieldPyPI · mobsf · fixed in 4.4.5
- CVE-2026-24489Gakido vulnerable to HTTP Header Injection (CRLF Injection)PyPI · gakido · fixed in 0.1.1
- CVE-2026-24486Python-Multipart has Arbitrary File Write via Non-Default ConfigurationPyPI · python-multipart · fixed in 0.0.22
- CVE-2026-24408sigstore has CSRF possibility in OIDC authentication during signingPyPI · sigstore · fixed in 4.2.0
- CVE-2026-24123BentoML has a Path Traversal via Bentofile ConfigurationPyPI · bentoml · fixed in 1.4.34
- CVE-2026-22696dcap-qvl has Missing Verification for QE IdentityPyPI · dcap-qvl · fixed in 0.3.9
- CVE-2025-11687Gi-docgen: reflected dom xss in gi-docgenPyPI · gi-docgen · fixed in 2025.5
- CVE-2026-0994Denial of Service in Python ProtobufPyPI · protobuf · fixed in 5.29.6, 6.33.5
- CVE-2026-0770Langflow exec_globals Inclusion of Functionality from Untrusted Control Sphere Remote Code Execution VulnerabilityPyPI · langflow
- CVE-2026-24130Moonraker with LDAP Enabled Allows Malicious Search Filter InjectionPyPI · moonraker · fixed in 0.10.0
- CVE-2026-1260Invalid Memory Access in Sentencepiece,PyPI · sentencepiece · fixed in 0.2.1