Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-72818NLTK TweetTokenizer URL Pattern Backtracks Catastrophically on Naked-Domain-Like InputPyPI · nltk · fixed in 3.10.1
- CVE-2026-49244SFTPGo: Path confinement bypass in public browsable share partial ZIP downloadGo · github.com/drakkan/sftpgo, github.com/drakkan/sftpgo/v2 · fixed in 2.7.3
- CVE-2026-49245SFTPGo: Stored XSS via inline parameter on public shares and user file downloadGo · github.com/drakkan/sftpgo, github.com/drakkan/sftpgo/v2 · fixed in 2.7.3
- CVE-2026-50192Kerberos Hub private key (X-Kerberos-Hub-PrivateKey) leaked to cross-host redirect target due to redirect-following HTTP client without CheckRedirectGo · github.com/kerberos-io/agent/machinery · fixed in 0.0.0-20260528173546-51f1a52e170f
- CVE-2026-728609router Server-Side Request Forgery via /api/provider-nodes/validate Because the IPv4-Mapped IPv6 Denylist Check Is Unreachablenpm · 9router
- CVE-2026-67448Mailpit: WebSocket origin check bypass via percent-encoded path (regression of CVE-2026-22689)Go · github.com/axllent/mailpit · fixed in 1.30.6
- CVE-2026-67447Mailpit: SMTP DATA line reader buffers over-limit input before size enforcementGo · github.com/axllent/mailpit · fixed in 1.30.5
- CVE-2026-67445Mailpit: SMTP command parser buffers unbounded command lines before syntax rejectionGo · github.com/axllent/mailpit · fixed in 1.30.4
- CVE-2026-67446Mailpit: Thumbnail generation decodes unbounded image dimensions before scalingGo · github.com/axllent/mailpit · fixed in 1.30.4
- CVE-2026-68921DiceBear: SVG injection via the unescaped rotate option in @dicebear/core (and fontSize/fontWeight in @dicebear/initials)npm · @dicebear/core, @dicebear/initials · fixed in 9.4.3
- CVE-2026-71485Centrifugo: Client-forgeable headers emulation lets any client spoof headers forwarded to proxy backendsGo · github.com/centrifugal/centrifugo, github.com/centrifugal/centrifugo/v3 +3 · fixed in 6.9.0
- CVE-2026-75526django CMS: Stored XSS in edit-mode plugin exception renderingPyPI · django-cms · fixed in 5.0.9
- CVE-2026-63003django CMS: Broken access control in page *Duplicate* allows reading the content of any page (cross-site / restriction bypass)PyPI · django-cms · fixed in 5.0.9
- CVE-2026-61663django CMS: Missing authorization in `render_object_structure` discloses non-PageContent placeholder structure to low-privileged staffPyPI · django-cms · fixed in 5.0.9
- CVE-2026-54622django CMS: Clipboard copy IDOR discloses unauthorized plugin contentPyPI · django-cms · fixed in 5.0.8
- CVE-2026-54624django CMS: Structure endpoint bypasses page-view permissionPyPI · django-cms · fixed in 5.0.8
- CVE-2026-54623django CMS: Plugin move endpoint allows cyclic reparenting (DoS)PyPI · django-cms · fixed in 5.0.8
- CVE-2026-54625django CMS: Page cache ignores plugin-declared Vary headers (disclosure & poisoning)PyPI · django-cms · fixed in 5.0.8
- CVE-2026-54136Windmill: Resource-scoped API tokens can read script contents outside their allowed path via scripts/list_searchcrates.io · windmill-api · fixed in 1.715.0
- CVE-2026-61625VictoriaMetrics vmrestore: path traversal via crafted backup part names escapes restore rootGo · github.com/victoriametrics/victoriametrics · fixed in 1.122.25, 1.136.12, 1.146.0
- CVE-2026-71428unstructured: Server-Side Request Forgery in the URL-based partitioningPyPI · unstructured · fixed in 0.24.0
- CVE-2026-65842Plate: SSRF with response disclosure in DOCX image embeddingnpm · @platejs/docx-io · fixed in 53.3.2
- CVE-2026-40345deepmerge-ts: Stack exhaustion when merging recursive object graphsnpm · deepmerge-ts · fixed in 8.0.0
- CVE-2026-54770WebOb: Open redirect in Location header normalization via leading C0 control / space charactersPyPI · webob · fixed in 1.8.11
- CVE-2026-63481Hurl: Cookies in Cookies section leak when redirecting to a different hostcrates.io · hurl
- CVE-2026-61704link-preview-js DNS Rebinding SSRF Bypass / Incomplete Fix for CVE-2026-43897npm · link-preview-js · fixed in 4.0.4
- CVE-2026-71492Banks: Path traversal in `DirectoryPromptRegistry.set()` allows arbitrary file write outside the registry rootPyPI · banks · fixed in 2.4.5
- CVE-2026-54449LangBot: Authenticated RCE Via MCP ConfigurationPyPI · langbot
- CVE-2026-75140jsoup Uncontrolled Resource Consumption in XmlTreeBuilderMaven · org.jsoup:jsoup · fixed in 1.23.2
- CVE-2026-63490Handlebars.java: Arbitrary file read in `SpringTemplateLoader` via URL-fragment suffix bypassMaven · com.github.jknack:handlebars-springmvc · fixed in 4.5.3