Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-113723virtualenv: Bash prompt values can change meaning under older compatibility modesPyPI · virtualenv · fixed in 21.14.9
- CVE-2026-113722virtualenv: Generated POSIX console launchers interpret destination paths as shell syntaxPyPI · virtualenv · fixed in 21.14.9
- CVE-2026-113721virtualenv: Generated files can follow existing destination linksPyPI · virtualenv · fixed in 21.14.9
- CVE-2026-113720virtualenv: Seeded files retain permissions from an older cachePyPI · virtualenv · fixed in 21.14.9
- CVE-2026-113715virtualenv: Venv configuration readback can reinterpret path boundariesPyPI · virtualenv · fixed in 21.14.9
- CVE-2026-113719virtualenv: Seed replacement does not contain metadata deletion pathsPyPI · virtualenv · fixed in 21.14.9
- CVE-2026-113718virtualenv: Xonsh activation literals depend on the script decoding codecPyPI · virtualenv · fixed in 21.14.9
- CVE-2026-113717virtualenv: Pip seeding with download omits wheel digest verificationPyPI · virtualenv · fixed in 21.14.9
- CVE-2026-113716virtualenv: Builtin creation follows linked environment directoriesPyPI · virtualenv · fixed in 21.14.9
- CVE-2026-113714virtualenv: Downloaded wheel selection and caching precede verificationPyPI · virtualenv · fixed in 21.14.9
- CVE-2026-113713virtualenv: Temporary app-data can leave dangling seed package linksPyPI · virtualenv · fixed in 21.14.10
- CVE-2026-112941filelock: SoftReadWriteLock follows a lock tree swapped in after its first acquire and writes lock records into directories of the user running the lockPyPI · filelock · fixed in 4.2.1
- CVE-2026-112940filelock ReadWriteLock: SQLite reopens the lock database by name, so a planted symlink or journal file makes the lock user's process overwrite or unlink its own filesPyPI · filelock · fixed in 4.2.1
- CVE-2026-112939filelock: SoftFileLock removes a live holder's marker when another user forges the PID in a writable markerPyPI · filelock · fixed in 4.2.1
- CVE-2026-112937filelock: ReadWriteLock on the hard-link route deletes any directory another user renames onto its .filelock-* link directory namePyPI · filelock · fixed in 4.2.1
- CVE-2026-112936filelock: ReadWriteLock follows a symlink at the lock path into SQLitePyPI · filelock · fixed in 4.0.9
- CVE-2026-112935filelock: SoftFileLock stale-lock break removes a live lock file on a reused inode number and admits two holdersPyPI · filelock · fixed in 4.2.1
- CVE-2026-112934filelock: SoftReadWriteLock holder refresh writes through a hard link and hangs on a named pipe that another local user renames over its recordPyPI · filelock · fixed in 4.2.1
- CVE-2026-112915filelock ReadWriteLock: a crafted lock database makes every acquire stall or hang regardless of timeoutPyPI · filelock · fixed in 4.2.1
- CVE-2026-112914filelock: SoftFileLock stale-break restore follows a swapped-in symbolic link and hard-links a file of the user running the lock into the lock directoryPyPI · filelock · fixed in 4.2.1
- CVE-2026-112912filelock: Symlink swap during SoftFileLock's writability check leaks whether a path exists and is writable by the lock takerPyPI · filelock · fixed in 4.2.1
- CVE-2026-112911filelock: StrictSoftFileLock and SoftReadWriteLock adopt a protocol directory another user created first, losing mutual exclusionPyPI · filelock · fixed in 4.2.1
- CVE-2026-112909filelock: UnixFileLock truncates and chmods any regular file another user renames or hard-links onto the lock pathPyPI · filelock · fixed in 4.2.1
- CVE-2026-112906filelock: SoftFileLock evicts a fresh lock file whose watched age another local user's pre-dated file passed on through inode reusePyPI · filelock · fixed in 4.2.1
- CVE-2026-112901Pillow: ReDoS in XbmImagePlugin: 512-byte file stalls Image.open() for minutesPyPI · pillow · fixed in 13.0.0
- CVE-2026-112900Pillow: Argument Injection in Ghostscript call, potentially leading into RCEPyPI · pillow · fixed in 13.0.0
- CVE-2026-112898Pillow: Image.quantize() with empty palette leaks uninitialized stack memoryPyPI · pillow · fixed in 13.0.0
- CVE-2026-112897Pillow: TiffDecode returns uninitialized memory as pixels for short JPEG stripsPyPI · pillow · fixed in 13.0.0
- CVE-2026-112896Pillow: TIFF encoder ColorMap plane-size mismatch causes a heap out-of-bounds readPyPI · pillow · fixed in 13.0.0
- CVE-2026-112895Pillow: Unbounded recursion parsing a PDF page tree or trailer chain (incomplete fix for CVE-2026-42310)PyPI · pillow · fixed in 13.0.0