Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-70588Ghost: Cross-Site Scripting in Universal Importnpm · ghost · fixed in 6.54.1
- CVE-2026-70494Open WebUI: A folder write-collaborator can permanently delete the owner's chats by deleting a shared subfolderPyPI · open-webui · fixed in 0.11.0
- CVE-2026-70493Open WebUI: Any authenticated user can stall a worker via a knowledge-search pattern that backtracks catastrophicallyPyPI · open-webui · fixed in 0.11.0
- CVE-2026-70492Open WebUI: Stored XSS via unescaped KaTeX render-error fallback in rendered messagesPyPI · open-webui · fixed in 0.11.0
- CVE-2026-70491Open WebUI: Tool source code disclosed to read-only users via the tool list and get endpointsPyPI · open-webui · fixed in 0.11.0
- CVE-2026-70490Open WebUI: Unapproved accounts can open terminal sessions via a WebSocket auth path missing the role checkPyPI · open-webui · fixed in 0.11.0
- CVE-2026-70489Open WebUI: Instance-wide stall via automation recurrence rules that force multi-second parsingPyPI · open-webui · fixed in 0.11.0
- CVE-2026-54020Open WebUI: DNS Rebinding SSRF BypassPyPI · open-webui · fixed in 0.11.0
- CVE-2026-70488Open WebUI: Deletion of directories and file embeddings in other knowledge bases via sync cleanupPyPI · open-webui · fixed in 0.11.0
- CVE-2026-70487Open WebUI: Cross-user file content disclosure via request-scoped direct model knowledge metadataPyPI · open-webui · fixed in 0.11.0
- CVE-2026-70486Open WebUI: Same-origin XSS to account takeover via terminal file-preview iframe hardcoding allow-same-originPyPI · open-webui · fixed in 0.11.0
- CVE-2026-70485Open WebUI: Any authenticated user can reach internal services and cloud metadata via NAT64-encoded URLsPyPI · open-webui · fixed in 0.11.0
- CVE-2026-70484Open WebUI: Users denied the image-generation permission can still generate images via chat completionsPyPI · open-webui · fixed in 0.11.0
- CVE-2026-70483Open WebUI: Any authenticated user can cancel another user's chat generation via the chat delete endpointPyPI · open-webui · fixed in 0.11.0
- CVE-2026-70482Open WebUI: Account takeover via OAuth token exchange accepting tokens issued to any clientPyPI · open-webui · fixed in 0.11.0
- CVE-2026-48154GoRest: InMemorySecret2FA race condition allows process crash via concurrent map accessGo · github.com/pilinux/gorest · fixed in 1.12.2
- CVE-2026-70481Open WebUI: Any member with write access to a standard channel can edit or delete other members' messagesPyPI · open-webui · fixed in 0.11.0
- CVE-2026-70480Open WebUI: Client-side SSRF via unrestricted external resource loading in Vega/Vega-Lite chart renderingPyPI · open-webui · fixed in 0.11.0
- CVE-2026-70479Open WebUI: SSRF into internal services via unvalidated sub-resource requests in the Playwright web loaderPyPI · open-webui · fixed in 0.11.0
- CVE-2026-70478Flowise: Unauthenticated OAuth2 token refresh endpoint returns access tokens — enables token theft for any connected servicenpm · flowise · fixed in 3.1.3
- CVE-2026-70477Flowise: CSV Agent Prompt Injection Remote Code Execution Vulnerabilitynpm · flowise, flowise-components · fixed in 3.1.3
- CVE-2026-70476Flowise: Broken Access Control in Stripe Subscription Endpoints Allows Cross-Tenant Billing Manipulationnpm · flowise · fixed in 3.1.3
- CVE-2026-70475Flowise: Missing Authorization on Execution Update Endpointnpm · flowise · fixed in 3.1.3
- CVE-2026-47781pdm: Project-Controlled `.pdm-plugins` Content Executes Before CLI ParsingPyPI · pdm · fixed in 2.27.0
- CVE-2026-70474Flowise: Cross-Workspace OAuth2 Credential Metadata Leaknpm · flowise · fixed in 3.1.3
- CVE-2026-47764pdm: Path traversal in wheel installation via overridden write_to_fsPyPI · pdm · fixed in 2.27.0
- CVE-2026-70473Flowise: Information Disclosure in GET /api/v1/upsert-history returns the entire server-wide upsert historynpm · flowise · fixed in 3.1.3
- CVE-2026-70472Flowise: Cross-workspace credential IDOR in openai-assistants-vector-storenpm · flowise · fixed in 3.1.3
- CVE-2026-70471Flowise: RBAC Bypass Leading to Unauthorized Workspace Variables Disclosurenpm · flowise · fixed in 3.1.3
- CVE-2026-70470Flowise: Pyodide validator Unicode homoglyph bypass leads to RCEnpm · flowise, flowise-components · fixed in 3.1.3