Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2025-55178Llama Stack prior to version v0.2.20 accepted unverified parameters in the resolve_ast_by_type function which could potentially allow for rePyPI · llama-stack · fixed in 0.2.20
- CVE-2025-8869Fallback tar extraction in pip doesn't check symbolic links point to extraction directoryPyPI · pip · fixed in 25.3
- CVE-2025-48459Apache IoTDB: Deserialization of untrusted DataPyPI · apache-iotdb · fixed in 2.0.5
- CVE-2025-6921Regular Expression Denial of Service (ReDoS) in huggingface/transformersPyPI · transformers · fixed in 4.53.0
- CVE-2025-59420Authlib: JWS/JWT accepts unknown crit headers (RFC violation → possible authz bypass)PyPI · authlib · fixed in 1.6.4
- CVE-2025-6544Deserialization Vulnerability in h2oai/h2o-3PyPI · h2o
- CVE-2025-9905Arbitary Code execution in Keras load_model()PyPI · keras · fixed in 3.11.3
- CVE-2025-9906Arbitrary Code execution in Keras Safe ModePyPI · keras · fixed in 3.11.0
- CVE-2025-6237Path Traversal and Arbitrary File Deletion in invoke-ai/invokeaiPyPI · invokeai · fixed in 6.7.0
- CVE-2025-10157PickleScan Bypasses Unsafe Globals Check Using Submodule ImportsPyPI · picklescan · fixed in 0.0.31
- CVE-2025-10156PickleScan Security Bypass via Bad CRC in ZIP ArchivePyPI · picklescan · fixed in 0.0.31
- CVE-2025-10155PickleScan Security Bypass Using Misleading File ExtensionPyPI · picklescan · fixed in 0.0.31
- CVE-2025-49089wangxutech MoneyPrinterTurbo 1.2.6 allows path traversal via /api/v1/download/ URIs such as /api/v1/download//etc/passwd.PyPI · moneyprinterturbo
- CVE-2025-59376feiskyer mcp-kubernetes-server through 0.1.11 does not consider chained commands in the implementation of --disable-write and --disable-delePyPI · mcp-kubernetes-server
- CVE-2025-59377feiskyer mcp-kubernetes-server through 0.1.11 allows OS command injection, even in read-only mode, via /mcp/kubectl because shell=True is usPyPI · mcp-kubernetes-server
- CVE-2025-6051Regular Expression Denial of Service (ReDoS) in huggingface/transformersPyPI · transformers · fixed in 4.53.0
- CVE-2025-6638Regular Expression Denial of Service (ReDoS) in huggingface/transformersPyPI · transformers · fixed in 4.53.0
- CVE-2025-58065Flask App Builder has an Authentication Bypass vulnerability when using non AUTH_DB methodsPyPI · flask-appbuilder · fixed in 4.8.1
- CVE-2025-10193Neo4j Cypher MCP server is vulnerable to DNS rebinding attacksPyPI · mcp-neo4j-cypher · fixed in 0.4.0
- CVE-2025-59035Indico vulnerable to Cross-Site Scripting via LaTeX math codePyPI · indico · fixed in 3.3.8
- CVE-2025-59034Indico may disclose unauthorized user details access via legacy APIPyPI · indico · fixed in 3.3.8
- CVE-2025-59042PyInstaller has local privilege escalation vulnerabilityPyPI · pyinstaller · fixed in 6.0.0
- CVE-2025-59036Infrahub allows authentication with deleted and expired API tokensPyPI · infrahub-server · fixed in 1.3.9, 1.4.5
- CVE-2025-58753copyparty: Sharing a single file does not fully restrict access to other files in source folderPyPI · copyparty · fixed in 1.19.8
- CVE-2025-58180OctoPrint is Vulnerable to RCE Attacks via Unsanitized Filename in File UploadPyPI · octoprint · fixed in 1.11.3
- CVE-2025-10164lmsys sglang update_weights_from_tensor main deserializationPyPI · sglang · fixed in 0.5.4
- CVE-2025-58757MONAI's unsafe use of Pickle deserialization may lead to RCEPyPI · monai · fixed in 1.5.1rc1, 1.5.1
- CVE-2025-58756MONAI's unsafe torch usage may lead to arbitrary code executionPyPI · monai · fixed in 1.5.1rc1, 1.5.1
- CVE-2025-58755MONAI has path traversal issue that may lead to arbitrary file writesPyPI · monai · fixed in 1.5.1, 1.5.1rc1
- CVE-2025-57817Fides Webserver API is Vulnerable to OAuth Client Privilege EscalationPyPI · ethyca-fides · fixed in 2.69.1