Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-55620eml_parser: DoS via deeply nested parens in Received headersPyPI · eml-parser · fixed in 3.0.2
- CVE-2026-55619eml_parser: Parser DoS via deeply nested parentheses in e-mail headersPyPI · eml-parser · fixed in 3.0.2
- CVE-2026-55618eml_parser: URL extraction bypass via HTML entities in URLsPyPI · eml-parser · fixed in 3.0.2
- CVE-2026-55663mediasoup: SCTP state cookie lacks cryptographic authentication, enabling unauthorized association establishment (RFC 9260 violation)npm · mediasoup · fixed in 3.20.6
- CVE-2026-55637genieacs-mcp: DNS rebinding reaches local GenieACS MCP Streamable HTTP transportGo · github.com/geiserx/genieacs-mcp · fixed in 0.3.2
- CVE-2026-55419Reachy Mini: Unrestricted Upload of File with Dangerous TypePyPI · reachy-mini · fixed in 1.8.2
- CVE-2026-55557browse-mcp: Arbitrary file write via unconfined download and state pathsnpm · browse-mcp · fixed in 0.8.2
- CVE-2026-55585QWED: Authenticated Remote Code Execution via Unsafe SymPy `parse_expr()`PyPI · qwed · fixed in 5.1.2
- CVE-2026-55553urllib: Cross-origin redirects preserve credential-bearing request headers, leading to potential credential leakagenpm · urllib · fixed in 4.9.1, 2.44.1
- CVE-2026-55571djust authentication bypass: a login_required / on_mount LiveView mount redirect does not close the WebSocket, allowing an unauthenticated client to dispatch event-handler callsPyPI · djust · fixed in 1.0.4
- CVE-2026-55640Nextcloud MCP Server: Unauthenticated `POST /webhooks/nextcloud` allows arbitrary vector data deletion when `WEBHOOK_SECRET` is unset ( default )PyPI · nextcloud-mcp-server · fixed in 0.117.2
- CVE-2026-55580mcp-shell — Security Disabled by Default in Bare-Binary Deploy Path + Shell Interpreter in Secure-Mode AllowlistGo · github.com/sonirico/mcp-shell · fixed in 0.6.0
- CVE-2026-55581mcp-shell: Secure Mode Allowlist Bypass via Default `/bin/bash` ExecutableGo · github.com/sonirico/mcp-shell · fixed in 0.6.0
- CVE-2026-55582mcp-shell: Secure Mode Allowlist Bypass via Git Shell AliasGo · github.com/sonirico/mcp-shell · fixed in 0.6.0
- CVE-2026-55546QWED-MCP: Unsafe SymPy `parse_expr()` Remote Code Execution via Unsanitized Math Expression InputPyPI · qwed-mcp · fixed in 0.2.1
- CVE-2026-55536Browser Server WebSocket origin validation bypass via unanchored regex (patch bypass of CVE-2026-40289 / GHSA-8x8f-54wf-vv92)PyPI · praisonai · fixed in 4.6.58
- CVE-2026-55532PraisonAI: Origin-validation bypass (startswith prefix match) enables unauthenticated cross-site request forgery against the PraisonAI MCP HTTP serverPyPI · praisonai · fixed in 4.6.58
- CVE-2026-79783rclone before 1.74.4 Privilege Escalation via setuid MetadataGo · github.com/rclone/rclone · fixed in 1.74.4
- CVE-2026-79782rclone before 1.74.4 Security Token Disclosure via HTTPS to HTTP RedirectGo · github.com/rclone/rclone · fixed in 1.74.4
- CVE-2026-79781rclone serve s3 Path Traversal via dot-dot object keysGo · github.com/rclone/rclone · fixed in 1.74.4
- CVE-2026-79780rclone before v1.75.0 Credential Exposure via S3 RedirectGo · github.com/rclone/rclone · fixed in 1.75.0
- CVE-2026-79779rclone before v1.75.0 WebDAV Credential Exposure via HTTPS-to-HTTP RedirectGo · github.com/rclone/rclone · fixed in 1.75.0
- CVE-2026-79778rclone before v1.75.0 Denial of Service via TUS nil-response panicGo · github.com/rclone/rclone · fixed in 1.75.0
- CVE-2026-79777rclone before v1.75.0 Information Disclosure via RC APIGo · github.com/rclone/rclone · fixed in 1.75.0
- CVE-2026-79774Winter CMS before 1.2.13 Twig Sandbox Escape via SecurityPolicyPackagist · winter/wn-system-module · fixed in 1.2.13
- CVE-2026-79773Winter CMS before 1.2.13 Local File Inclusion via JavaScriptPackagist · winter/wn-system-module · fixed in 1.2.13
- CVE-2026-79772Nokogiri before 1.19.1 Unchecked Return Value canonicalizeRubyGems · nokogiri · fixed in 1.19.1
- CVE-2026-79771Nokogiri before 1.19.3 Memory Leak via XSLT TransformRubyGems · nokogiri · fixed in 1.19.3
- CVE-2026-79770Nokogiri before 1.19.3 ReDoS via CSS selector tokenizerRubyGems · nokogiri · fixed in 1.19.3
- CVE-2026-79676NLTK before 3.10.3 Path Traversal via Symlink BypassPyPI · nltk · fixed in 3.10.3