Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2025-13372Potential SQL injection in FilteredRelation column aliases on PostgreSQLPyPI · django · fixed in 5.2.9, 5.1.15, 4.2.27
- CVE-2025-65858A Stored Cross-Site Scripting (XSS) vulnerability in Calibre-Web v0.6.25 allows attackers to inject malicious JavaScript into the 'username'PyPI · calibreweb
- CVE-2025-65896SQL injection vulnerability in long2ice assyncmy thru 0.2.10 allows attackers to execute arbitrary SQL commands via crafted dict keys.PyPI · asyncmy
- CVE-2025-66448vLLM vulnerable to remote code execution via transformers_utils/get_configPyPI · vllm · fixed in 0.11.1
- CVE-2025-66422Tryton trytond before 7.6.11 allows remote attackers to obtain sensitive trace-back (server setup) information.PyPI · trytond · fixed in 7.6.11, 7.4.21, 7.0.40 and more
- CVE-2025-66423Tryton trytond 6.0 before 7.6.11 does not enforce access rights for the route of the HTML editor.PyPI · trytond · fixed in 6.0.70, 7.0.40, 7.4.21 and more
- CVE-2025-66424Tryton trytond 6.0 before 7.6.11 does not enforce access rights for data export.PyPI · trytond · fixed in 7.6.11, 7.4.21, 7.0.40 and more
- CVE-2025-66221Werkzeug safe_join() allows Windows special device namesPyPI · werkzeug · fixed in 3.1.4
- CVE-2025-66034fontTools is Vulnerable to Arbitrary File Write and XML injection in fontTools.varLibPyPI · fonttools · fixed in 4.60.2
- CVE-2025-66371Peppol-py before 1.1.1 allows XXE attacks because of the Saxon configuration.PyPI · peppol-py · fixed in 1.1.1
- CVE-2025-13742Limited HTML injection in emailsPyPI · pretix · fixed in 2025.7.2, 2025.7.3, 2025.8.2 and more
- CVE-2025-66040Spotipy has a XSS vulnerability in OAuth callback serverPyPI · spotipy · fixed in 2.25.2
- CVE-2025-62593Ray is vulnerable to RCE via Safari & Firefox Browsers through DNS Rebinding AttackPyPI · ray · fixed in 2.52.0
- CVE-2021-4472Python-mistralclient: mistral-dashboard: local file inclusion through the 'create workbook' featurePyPI · python-mistralclient · fixed in 4.3.0
- CVE-2025-65681An issue was discovered in Overhang.IO (tutor-open-edx) (overhangio/tutor) 20.0.2 allowing local unauthorized attackers to gain access to sePyPI · tutor
- CVE-2025-66019pypdf manipulated LZWDecode streams can exhaust RAMPyPI · pypdf · fixed in 6.4.0
- CVE-2025-62703Fugue is Vulnerable to Remote Code Execution by Pickle Deserialization via FlaskRPCServerPyPI · fugue
- CVE-2025-13609Keylime: keylime: registrar allows identity takeover via duplicate uuid registrationPyPI · keylime · fixed in 7.13.0
- CVE-2025-65106LangChain Vulnerable to Template Injection via Attribute Access in Prompt TemplatesPyPI · langchain-core · fixed in 1.0.7, 0.3.80
- CVE-2025-62609MLX has Wild Pointer Dereference in load_gguf()PyPI · mlx · fixed in 0.29.4
- CVE-2025-62608MLX has heap-buffer-overflow in load()PyPI · mlx · fixed in 0.29.4
- CVE-2025-62372vLLM vulnerable to DoS with incorrect shape of multimodal embedding inputsPyPI · vllm · fixed in 0.11.1
- CVE-2025-62426vLLM vulnerable to DoS via large Chat Completion or Tokenization requests with specially crafted `chat_template_kwargs`PyPI · vllm · fixed in 0.11.1
- CVE-2025-62164VLLM deserialization vulnerability leading to DoS and potential RCEPyPI · vllm · fixed in 0.11.1
- CVE-2025-64521authentik deactivated service accounts can authenticate to OAuthPyPI · authentik-client · fixed in 2025.8.5, 2025.10.2
- CVE-2025-65015joserfc has Possible Uncontrolled Resource Consumption Vulnerability Triggered by Logging Arbitrarily Large JWT Token PayloadsPyPI · joserfc · fixed in 1.3.5, 1.4.2
- CVE-2025-60455Unsafe Deserialization vulnerability in Modular Max Serve before 25.6, specifically when the "--experimental-enable-kvcache-agent" feature iPyPI · max, modular · fixed in 25.6.0
- CVE-2025-64076Multiple vulnerabilities exist in cbor2 through version 5.7.0 in the decode_definite_long_string() function of the C extension decoder (sourPyPI · cbor2 · fixed in 5.7.1
- CVE-2025-65073OpenStack Keystone before 26.0.1, 27.0.0, and 28.0.0 allows a /v3/ec2tokens or /v3/s3tokens request with a valid AWS Signature to provide KePyPI · keystone · fixed in 26.0.1, 27.0.0, 28.0.0
- CVE-2025-12765pgAdmin 4: LDAP authentication flow vulnerable to TLS certificate verification bypass.PyPI · pgadmin4 · fixed in 9.10