Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-24009Docling Core vulnerable to Remote Code Execution via unsafe PyYAML usagePyPI · docling-core · fixed in 2.48.4
- CVE-2025-71176pytest through 9.0.2 on UNIX relies on directories with the /tmp/pytest-of-{user} name pattern, which allows local users to cause a denial oPyPI · pytest · fixed in 9.0.3
- CVE-2026-24049wheel Allows Arbitrary File Permission Modification via Path TraversalPyPI · wheel · fixed in 0.46.2
- CVE-2026-23946Tendenci has Authenticated Remote Code Execution via Pickle DeserializationPyPI · tendenci · fixed in 15.3.12
- CVE-2025-67221The orjson.dumps function in orjson thru 3.11.4 does not limit recursion for deeply nested JSON documents.PyPI · orjson · fixed in 3.11.5, 3.11.6
- CVE-2026-23996FastAPI Api Key has a timing side-channel in verify_key that allows statistical key validity detectionPyPI · fastapi-api-key · fixed in 1.1.0
- CVE-2026-23986Copier safe template has arbitrary filesystem write access via directory symlinks when _preserve_symlinks: truePyPI · copier · fixed in 9.11.2
- CVE-2026-23968Copier safe template has arbitrary filesystem read access via symlinks when _preserve_symlinks: falsePyPI · copier · fixed in 9.11.2
- CVE-2026-22807vLLM affected by RCE via auto_map dynamic module loading during model initializationPyPI · vllm · fixed in 0.14.0
- CVE-2026-23949jaraco.context Has a Path Traversal VulnerabilityPyPI · jaraco-context · fixed in 6.1.0
- CVE-2026-22219Chainlit < 2.9.4 SQLAlchemy Data Layer SSRF via /project/elementPyPI · chainlit · fixed in 2.9.4
- CVE-2026-22218Chainlit < 2.9.4 Arbitrary File Read via /project/elementPyPI · chainlit · fixed in 2.9.4
- CVE-2026-23877Directory Traversal & Filesystem can be accessed by a non-admin userPyPI · swingmusic · fixed in 2.1.4
- CVE-2026-23842ChatterBot has Denial of Service via Database Connection Pool ExhaustionPyPI · chatterbot · fixed in 1.2.11
- CVE-2026-23833ESPHome vulnerable to denial-of-service via out-of-bounds check bypass in the API componentPyPI · esphome · fixed in 2025.12.7
- CVE-2025-68616WeasyPrint Vulnerable to Server-Side Request Forgery (SSRF) Protection Bypass via HTTP RedirectPyPI · weasyprint · fixed in 68.0
- CVE-2026-23535wlc Path traversal: Unsanitized API slugs in download commandPyPI · wlc · fixed in 1.17.2
- CVE-2026-23490pyasn1 has a DoS vulnerability in decoderPyPI · pyasn1 · fixed in 0.6.2
- CVE-2026-23528Dask distributed Vulnerable to Remote Code Execution via Jupyter Proxy and DashboardPyPI · distributed · fixed in 2026.1.0
- CVE-2025-68675Apache Airflow: proxy credentials for various providers might leak in task logsPyPI · apache-airflow, apache-airflow-core · fixed in 2.11.1, 3.1.6
- CVE-2025-68438Apache Airflow: Secrets in rendered templates could contain parts of sensitive values when truncatedPyPI · apache-airflow, apache-airflow-core · fixed in 3.1.6
- CVE-2026-0897Denial of Service in Keras via Excessive Memory Allocation in HDF5 MetadataPyPI · keras · fixed in 3.13.1, 3.12.1, 3.13.2
- CVE-2026-22779BlackSheep ClientSession is vulnerable to CRLF injectionPyPI · blacksheep · fixed in 2.4.6
- CVE-2026-21889Weblate leaks information via screenshotsPyPI · weblate · fixed in 5.15.2
- CVE-2025-68492Chainlit versions prior to 2.8.5 contain an authorization bypass through user-controlled key vulnerability.PyPI · chainlit · fixed in 2.8.5
- CVE-2026-22871GuardDog Path Traversal Vulnerability Leads to Arbitrary File Overwrite and RCEPyPI · guarddog · fixed in 2.7.1
- CVE-2026-22870GuardDog Zip Bomb Vulnerability in safe_extract() Allows DoSPyPI · guarddog · fixed in 2.7.1
- CVE-2026-21226Azure Core shared client library for Python Remote Code Execution VulnerabilityPyPI · azure-core · fixed in 1.38.0
- CVE-2024-58340LangChain <= 0.3.1 MRKLOutputParser ReDoSPyPI · langchain-exa · fixed in 1.0.0a1
- CVE-2024-14021LlamaIndex <= 0.11.6 BGEM3Index Unsafe DeserializationPyPI · llama-index · fixed in 0.11.7