Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-50288@asymmetric-effort/specifyjs: URL parse failure silently allows requestnpm · @asymmetric-effort/specifyjs · fixed in 0.2.136
- CVE-2026-54071BabelDOC: Arbitrary Code Execution via CMap Pickle Deserialization in babeldoc/pdfminer/cmapdb.pyPyPI · babeldoc · fixed in 0.6.3
- CVE-2026-54134OctoPrint: File exfiltration possible via query parameters on upload endpointsPyPI · octoprint · fixed in 1.11.8, 2.0.0rc3
- CVE-2026-35163OctoPrint: XSS in Suppressed Command NotificationsPyPI · octoprint · fixed in 1.11.8, 2.0.0rc3
- CVE-2026-63466Unleash: Global Mustache.escape override disables HTML escaping process-wide, enabling Slack/Teams link-injection via unrestricted usernamenpm · unleash-server · fixed in 8.0.3
- CVE-2026-63462Unleash: Unauthenticated single-request DoS via OpenAPI validation error formatternpm · unleash-server · fixed in 7.5.2, 7.6.5, 8.0.2
- CVE-2026-63004Unleash: Addon webhook URL is dialed server-side with no internal-address filtering, enabling SSRF to internal services / cloud metadata and exfiltration of configured request headersnpm · unleash-server · fixed in 7.5.2, 7.6.5, 8.0.2
- CVE-2026-71493Infracost: Arbitrary file read via config-template readFile symlink traversalGo · github.com/infracost/infracost · fixed in 0.10.45
- CVE-2026-71494Infracost: Terraform Cloud and registry token disclosure via unvalidated hostnameGo · github.com/infracost/infracost · fixed in 0.10.45
- CVE-2026-62675Omnigent: Uploaded Agent Bundle Allows Authenticated Runner RCE via Python Callable ToolsPyPI · omnigent · fixed in 0.3.0
- CVE-2026-62674Omnigent: Shared Agent Bundle Overwrite Leads to Authenticated Runner RCEPyPI · omnigent · fixed in 0.3.0
- CVE-2026-62677Omnigent: Unvalidated os_env.cwd in agent bundle yields arbitrary host filesystem access on runners without OMNIGENT_RUNNER_WORKSPACEPyPI · omnigent · fixed in 0.3.0
- CVE-2026-62676Omnigent Guardrail policy bypass: shell-command parser fails open in policies/builtins/_shell.pyPyPI · omnigent · fixed in 0.3.0
- CVE-2026-49114ONNX symlink-following and path-traversal arbitrary file writePyPI · onnx · fixed in 1.21.0
- CVE-2026-55622Incus has a project restriction bypass in instance copy across projectsGo · github.com/lxc/incus, github.com/lxc/incus/v6 +2 · fixed in 7.2.0
- CVE-2026-55621Incus has a project restriction bypass for custom volume copy across projectsGo · github.com/lxc/incus, github.com/lxc/incus/v6 +1 · fixed in 7.2.0
- CVE-2026-48769Incus has an arbitrary file write on its client due to trusted image hashGo · github.com/lxc/incus, github.com/lxc/incus/v6 +2 · fixed in 7.2.0
- CVE-2026-48755Incus has an argument injection in backup compression algorithm leading to AFW and ACEGo · github.com/lxc/incus, github.com/lxc/incus/v6 +2 · fixed in 7.2.0
- CVE-2026-48754Incus: Nil-pointer dereference in createDependentVolumesFromBackup on disk.{Volume,VolumeSnapshots,Pool}Go · github.com/lxc/incus, github.com/lxc/incus/v6 +2 · fixed in 7.1.0
- CVE-2026-48753Incus has an arbitrary file write via path traversal in S3 multipart uploadGo · github.com/lxc/incus, github.com/lxc/incus/v6 +2 · fixed in 7.1.0
- CVE-2026-48752Incus has arbitrary file read+write on host via templates/ symlink in malicious imageGo · github.com/lxc/incus, github.com/lxc/incus/v6 +2 · fixed in 7.2.0
- CVE-2026-48751Incus has a restricted project bypass leading to arbitrary command executionGo · github.com/lxc/incus, github.com/lxc/incus/v6 +2 · fixed in 7.2.0
- CVE-2026-48750Incus has an arbitrary file write on host via `exec-output` symlink in crafted imageGo · github.com/lxc/incus, github.com/lxc/incus/v6 +2 · fixed in 7.2.0
- CVE-2026-48749Incus has an arbitrary file read+write on host via rootfs/ symlink in malicious imageGo · github.com/lxc/incus, github.com/lxc/incus/v6 +2 · fixed in 7.2.0
- CVE-2026-47753Incus has a Nil-Pointer Dereference Panic via Instance Backup Import (volume omitted)Go · github.com/lxc/incus, github.com/lxc/incus/v6 +1 · fixed in 7.1.0
- CVE-2026-48756Incus: CreateCustomVolumeFromBackup nil-pointer dereference on volume_snapshots[*].expires_at (sibling-field variant of GHSA-r7w7)Go · github.com/lxc/incus, github.com/lxc/incus/v6 +2 · fixed in 7.1.0
- CVE-2026-77776Headroom Proxy Treats the Client-Supplied x-headroom-user-id Header as an Authenticated IdentityPyPI · headroom-ai · fixed in 0.36.1
- CVE-2026-77775Headroom Proxy Sends Upstream Requests to a Client-Supplied Base URL Without Address ValidationPyPI · headroom-ai · fixed in 0.36.1
- CVE-2026-77763JuiceFS Local Filestore Backend Joins Object Keys onto the Storage Root Without a Containment Check, Allowing Writes Outside the…Go · github.com/juicedata/juicefs
- CVE-2026-74866@fastify/busboy vulnerable to CRLF injection via multipart Content-Disposition filename and namenpm · @fastify/busboy · fixed in 3.2.2