Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2025-57108Kitware VTK (Visualization Toolkit) through 9.5.0 contains a heap use-after-free vulnerability in vtkGLTFDocumentLoader.PyPI · vtk · fixed in 9.5.1
- CVE-2025-63675cryptidy through 1.2.4 allows code execution via untrusted data because pickle.loads is used.PyPI · cryptidy
- CVE-2025-12060Keras keras.utils.get_file Utility Path Traversal VulnerabilityPyPI · keras · fixed in 3.12.0
- CVE-2025-54941Apache Airflow: Command injection in "example_dag_decorator"PyPI · apache-airflow, apache-airflow-core · fixed in 3.0.5
- CVE-2025-62402Apache Airflow: Airflow 3 API: /api/v2/dagReports executes DAG Python in APIPyPI · apache-airflow, apache-airflow-core · fixed in 3.1.1
- CVE-2025-62503Apache Airflow: Privilege boundary bypass in bulk APIs (create action can upsert existing Pools/Connections/Variables)PyPI · apache-airflow · fixed in 3.1.1
- CVE-2025-50736An open redirect vulnerability exists in Byaidu PDFMathTranslate v1.9.9 that allows attackers to craft URLs that cause the application to rePyPI · pdf2zh
- CVE-2025-11200MLflow Weak Password Requirements Authentication Bypass VulnerabilityPyPI · mlflow · fixed in 2.22.0rc0
- CVE-2025-11201MLflow Tracking Server Model Creation Directory Traversal Remote Code Execution VulnerabilityPyPI · mlflow · fixed in 2.22.4, 3.0.0
- CVE-2025-64104LangGraph SQLite Checkpoint Filter Key SQL Injection POC for SqliteStorePyPI · langgraph-checkpoint-sqlite · fixed in 2.0.11
- CVE-2025-64100CKAN Vulnerable to Session Cookie FixationPyPI · ckan · fixed in 2.10.9, 2.11.4
- CVE-2025-54384CKAN stored XSS vulnerability in Markdown description fieldsPyPI · ckan · fixed in 2.10.9, 2.11.4
- CVE-2025-12058Vulnerability in Keras Model.load_model Leading to Arbitrary Local File Loading and SSRFPyPI · keras · fixed in 3.12.0
- CVE-2025-62801FastMCP vulnerable to windows command injection in FastMCP Cursor installer via server_namePyPI · fastmcp · fixed in 2.13.0
- CVE-2025-62800FastMCP vulnerable to reflected XSS in client's callback pagePyPI · fastmcp · fixed in 2.13.0
- CVE-2025-62727Starlette vulnerable to O(n^2) DoS via Range header merging in starlette.responses.FileResponsePyPI · starlette · fixed in 0.49.1
- CVE-2025-40843Buffer overflow in CodeChecker log commandPyPI · codechecker · fixed in 6.26.2
- CVE-2025-61385SQL injection vulnerability in tlocke pg8000 1.31.4 allows remote attackers to execute arbitrary SQL commands via a specially crafted PythonPyPI · pg8000 · fixed in 1.31.5
- CVE-2025-8709SQL Injection in langchain-ai/langchainPyPI · langgraph-checkpoint-sqlite · fixed in 2.0.11
- CVE-2025-62708pypdf manipulated LZWDecode streams can exhaust RAMPyPI · pypdf · fixed in 6.1.3
- CVE-2025-62707pypdf affected by possible infinite loop when reading DCT inline images without EOF markerPyPI · pypdf · fixed in 6.1.3
- CVE-2025-62706Authlib : JWE zip=DEF decompression bomb enables DoSPyPI · authlib · fixed in 1.6.5
- CVE-2025-62611aiomysql allows arbitrary access to client files through vulnerability of a malicious MySQL serverPyPI · aiomysql · fixed in 0.3.0
- CVE-2025-62607Nautobot Single Source of Truth (SSoT) has an unauthenticated ServiceNow configuration URLPyPI · nautobot-ssot · fixed in 3.10.0
- CVE-2025-11844XPath Injection in Hugging Face Smolagents search_item_ctrl_f FunctionPyPI · smolagents · fixed in 1.22.0
- CVE-2025-62528Taguette cross-site scripting vulnerability via tag name, tag description, document name and document descriptionPyPI · taguette · fixed in 1.5.0
- CVE-2025-62527Taguette vulnerable to password reset link poisoningPyPI · taguette · fixed in 1.5.0, 1.5.1
- CVE-2025-62515Remote Code Execution by Pickle Deserialization via FlightServer in pyquokkaPyPI · pyquokka
- CVE-2025-49655Deserialization of untrusted data can occur in versions of the Keras framework running versions 3.11.0 up to but not including 3.11.3, enablPyPI · keras · fixed in 3.11.3
- CVE-2025-11849Versions of the package mammoth from 0.3.25 and before 1.11.0; versions of the package mammoth from 0.3.25 and before 1.11.0; versions of thPyPI · mammoth · fixed in 1.11.0