Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-49360Recce server has unauthenticated SQL execution that allows local file read/write through DuckDBPyPI · recce · fixed in 1.50.0
- CVE-2026-53541OliveTin has Unvalidated `ot_`-prefixed Arguments that Bypass Input FilteringGo · github.com/olivetin/olivetin · fixed in 0.0.0-20260531214440-ebffd9f040f7
- CVE-2026-47735Arc has an authenticated arbitrary local-file read via DuckDB I/O functions that bypasses RBAC table-level checksGo · github.com/basekick-labs/arc · fixed in 0.0.0-20260520141557-91bdc29d1a02
- CVE-2026-48050Arc: Unauthenticated access to Go debug pprof endpoints leaks runtime state and enables CPU-burn DoSGo · github.com/basekick-labs/arc · fixed in 0.0.0-20260520170331-32a4091fb949
- CVE-2026-53487Kite has an authenticated cluster RBAC bypass in /api/v1/overviewGo · github.com/zxh326/kite · fixed in 0.12.3
- CVE-2026-53531ratex-parser has unbounded parser recursion that leads to stack overflow (process abort)crates.io · ratex-parser · fixed in 0.1.11
- CVE-2026-53530ratex-parser panics on `\verb` with a multibyte delimiter (UTF-8 byte-boundary slice)crates.io · ratex-parser · fixed in 0.1.11
- CVE-2026-53509@aborruso/ckan-mcp-server: SSRF via base_url allows access to internal networks (Potential fix bypass of CVE-2026-33060)npm · @aborruso/ckan-mcp-server · fixed in 0.4.106
- CVE-2026-43980Malla: Stored XSS via Meshtastic node names in multiple frontend pagesPyPI · malla
- CVE-2026-77415JSONata: Arbitrary Code Execution via crafted JSONata expressionsnpm · jsonata · fixed in 2.2.1, 1.8.8
- CVE-2026-77414JSONata: Arbitrary Code Execution via crafted JSONata expressionsnpm · jsonata · fixed in 2.2.1, 1.8.8
- CVE-2026-77413JSONata: Arbitrary Code Execution via crafted JSONata expressionsnpm · jsonata · fixed in 1.8.8, 2.2.0
- CVE-2026-77354kin-openapi: Uncontrolled resource consumption in openapi3filter deepObject query parameter decodingGo · github.com/getkin/kin-openapi · fixed in 0.142.0
- CVE-2026-76905kin-openapi openai3filter: nil-pointer panic in ConvertErrors on malformed multipart/form-data body enables unauthenticated DoSGo · github.com/getkin/kin-openapi · fixed in 0.141.0
- CVE-2026-63135YOURLS: Stored XSS in referrer statistics chart via crafted Referer headerPackagist · yourls/yourls · fixed in 1.10.4
- CVE-2026-61539Xinference: Remote code execution via unsafe `eval()` in Llama3 tool-call parsingPyPI · xinference · fixed in 2.7.0
- CVE-2026-53656FiftyOne App server uses wildcard CORS (Access-Control-Allow-Origin: *), enabling cross-origin reads of local server dataPyPI · fiftyone · fixed in 1.17.0
- CVE-2026-54457TensorZero: Arbitrary file read and SSRF in TensorZero Gateway's internal object storage endpointPyPI · tensorzero · fixed in 2026.6.0
- CVE-2026-64679Atlantis: Path Traversal in Atlantis Workspace Handling Allows Out-of-Bounds Directory Deletion/CreationGo · github.com/runatlantis/atlantis · fixed in 0.45.0
- CVE-2026-44517Buildah: Build breakout using malicious Containerfile and Git Smart HTTP server or GitHub release tar archiveGo · github.com/containers/buildah · fixed in 1.43.2
- CVE-2026-59989Phalcon Volt compiler `join` filter compile-time PHP code injection (SSTI lead to RCE)Packagist · phalcon/cphalcon · fixed in 5.16.0
- CVE-2026-62283Nezha Monitoring: Cross-tenant terminal/file-manager session hijack via WebSocket stream UUID without ownership checkGo · github.com/nezhahq/nezha · fixed in 2.0.10
- CVE-2026-55185Miniflux 2: Open Redirect BypassGo · miniflux.app, miniflux.app/v2 · fixed in 2.3.1
- CVE-2026-63421Keystone: `graphql.maxTake` bypass with negative `take`npm · @keystone-6/core · fixed in 6.5.3
- CVE-2026-76904GeoTools has unauthenticated SQL injection in the jsonArrayContains filter function against PostGIS layersMaven · org.geotools.jdbc:gt-jdbc-postgis · fixed in 35.1, 34.5, 33.6
- CVE-2026-61824Defuddle: XSS via unescaped attribute interpolation in site extractorsnpm · defuddle · fixed in 0.19.1
- CVE-2026-53572KEDA: PostgreSQL connection string parameter injection via incomplete whitespace escapingGo · github.com/kedacore/keda, github.com/kedacore/keda/v2 · fixed in 2.20.0
- CVE-2026-68508Hydra: hydra.utils.instantiate with untrusted config can lead to code executionPyPI · hydra-core · fixed in 1.3.4
- CVE-2026-45099Terragrunt: Arbitrary File Deletion via Malicious Module ManifestGo · github.com/gruntwork-io/terragrunt · fixed in 1.0.4
- CVE-2026-50290@asymmetric-effort/specifyjs: CSS expression sanitization is bypassable in renderToStringnpm · @asymmetric-effort/specifyjs · fixed in 0.2.136