Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-59949yawkat LZ4 Java: JVM Crash via Null Byte Array in lz4-java Streaming XXHash JNI (StreamingXXHash32JNI / StreamingXXHash64JNI)Maven · at.yawk.lz4:lz4-java, org.lz4:lz4-java · fixed in 1.11.1
- CVE-2026-48798SSH.NET: ScpClient Recursive Download Allows Arbitrary File Write via Server-Controlled SCP FilenamesNuGet · ssh.net · fixed in 2026.0.0
- CVE-2026-63632ONNX: Heap-Buffer-Overflow READ in Gemm Version Converter Adapter via Undersized Input ShapePyPI · onnx · fixed in 1.22.0
- CVE-2026-71539n8n: Race Condition in Git Clone Node Allows Authenticated Users to Achieve Remote Code Executionnpm · n8n · fixed in 1.123.64, 2.30.1, 2.29.8
- CVE-2026-59940Seroval: `seroval.fromJSON()` Promise resolver type confusion invokes attacker-controlled methods during deserializationnpm · seroval · fixed in 1.5.3
- CVE-2026-73426Trix: Stored XSS vulnerability through serialized attributesnpm · trix · fixed in 2.1.17
- CVE-2026-75838DOMPurify before 3.4.13 Cross-Site Scripting via IN_PLACE hooknpm · dompurify · fixed in 3.4.13
- CVE-2026-75837Grav before 2.0.14 Privilege Escalation via Group Access FieldPackagist · getgrav/grav · fixed in 2.0.14
- CVE-2026-75834Grav before 2.0.14 Stored XSS via Invalid UTF-8 BytePackagist · getgrav/grav · fixed in 2.0.14
- CVE-2026-75831Grav before 2.0.15 Stored XSS via audio/video source URLPackagist · getgrav/grav · fixed in 2.0.15
- CVE-2026-75828Grav before 2.0.15 Stored XSS via detectXss() Quote BypassPackagist · getgrav/grav · fixed in 2.0.15
- CVE-2026-75827Grav before 2.0.15 Arbitrary File Write via error_logPackagist · getgrav/grav · fixed in 2.0.15
- CVE-2026-74907Grav before 2.0.15 Path Traversal via plugin-asset-map.phpPackagist · getgrav/grav · fixed in 2.0.15
- CVE-2026-74904SiYuan before v3.7.4 Missing Authorization via block APIGo · github.com/siyuan-note/siyuan/kernel · fixed in 0.0.0-20260804015139-bd067a4fe9b2
- CVE-2026-69146MLflow: LogInputs endpoint bypasses per-run UPDATE authorization in basic-authnpm · mlflow · fixed in 3.15.0
- CVE-2026-69148MLflow: CreateModelVersion source validation does not check READ permission on referenced run_idnpm · mlflow · fixed in 3.15.0
- CVE-2026-64849MLflow: Unauthenticated full-read SSRF in webhook delivery: _validate_webhook_url bypassed via unvalidated HTTP redirects (and DNS rebinding)PyPI · mlflow · fixed in 3.15.0
- CVE-2026-566779Router: Authenticated Server-Side Request Forgery (SSRF) via OIDC Provider Test Endpointnpm · 9router
- CVE-2026-47683vm2: bufferAllocLimit cap bypassed by Buffer.concat and Buffer.from arrayLikenpm · vm2 · fixed in 3.11.6
- CVE-2026-47686vm2: Missing Error.cause Sanitization Enables VM2 Sandbox Escape to RCEnpm · vm2 · fixed in 3.11.6
- CVE-2026-47698vm2: Sandbox Breakout Using Dangerous Host Proto Mutatorsnpm · vm2 · fixed in 3.11.6
- CVE-2026-54356Budibase authenticated arbitrary S3 signed upload URL issuance via `/api/attachments/:datasourceId/url`npm · @budibase/server
- CVE-2026-35219Budibase: SSRF in Automation Steps - Webhook, Zapier, N8N, Slack, Discord Bypass IP Blacklistnpm · @budibase/server · fixed in 3.41.3
- CVE-2026-73410Budibase: SSRF via DNS rebinding in the REST datasource integrationnpm · @budibase/server
- CVE-2026-64657Budibase: Database Connector SQL Injections in PostgreSQL, MS SQL, and MySQLnpm · budibase · fixed in 3.39.19
- CVE-2026-73560vLLM: SSRF + arbitrary local file read in MiMoV2OmniMultiModalProcessor `_fetch_image` and audio loader bypass MediaConnector protectionsPyPI · vllm · fixed in 0.26.0
- CVE-2026-71486vLLM: Derender endpoints decode caller-supplied GenerateResponse token IDs without output boundsPyPI · vllm · fixed in 0.26.0
- CVE-2026-71553ApostropheCMS: 2nd-order prototype pollution via PATCH leading to single-request persistent DoSnpm · apostrophe · fixed in 4.32.1
- CVE-2026-63667ApostropheCMS: Arbitrary file read via import-export attachment-name path traversalnpm · @apostrophecms/import-export · fixed in 3.6.2
- CVE-2026-63670ApostropheCMS: Mutation-XSS / allowedTags bypass via literal `</textarea/>` solidus closenpm · sanitize-html · fixed in 2.17.6