Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-47763pdm: Project-Local State and Config Writes Follow SymlinksPyPI · pdm · fixed in 2.27.0
- CVE-2026-69264Flowise: RCE via CSVAgent csvFile data URI base64 segment is interpolated into Python source without validationnpm · flowise, flowise-components · fixed in 3.1.3
- CVE-2026-69263Flowise: CVE-2025-8943 Patch Bypass: npm_config_yes bypasses MCP environment variable blocklist (Unauthenticated RCE)npm · flowise, flowise-components · fixed in 3.1.3
- CVE-2026-69262Flowise: `DELETE /api/v1/chatflows/:id` does not validate resource type, allowing `agentflows:delete` and `chatflows:delete` to delete each other’s flow typenpm · flowise · fixed in 3.1.3
- CVE-2026-48121@langchain/langgraph-checkpoint-mongodb: NoSQL parameter injection in MongoDBSaver allows cross-tenant state accessnpm · @langchain/langgraph-checkpoint-mongodb · fixed in 1.3.1
- CVE-2026-69259Flowise RCE via SQLite Record Manager Nodenpm · flowise, flowise-components · fixed in 3.1.3
- CVE-2026-69258Flowise: Unauthenticated Property Injection into Flow Execution Context via Ungated `overrideConfig` Spread in Prediction APInpm · flowise · fixed in 3.1.3
- CVE-2026-69257Flowise: SSRF Protection Bypass via IPv4-Mapped IPv6 Addressesnpm · flowise · fixed in 3.1.3
- CVE-2026-15830Potential denial-of-service vulnerability via nested geometry collectionsPyPI · django · fixed in 5.2.17, 6.0.8, 6.1.1
- CVE-2026-15307Server-side file-write and request forgery via spatial lookupsPyPI · django · fixed in 5.2.17, 6.0.8
- CVE-2026-69256Flowise: Remote Code Execution Vulnerability in CSVAgentnpm · flowise, flowise-components · fixed in 3.1.3
- CVE-2026-69255Flowise: CSV Agent Remote Code Execution via Pyodide Code Injection — Root Shell Verifiednpm · flowise, flowise-components · fixed in 3.1.3
- CVE-2026-10032Arbitrary JavaScript Execution via openUrl in @a2ui/web_corenpm · @a2ui/web_core · fixed in 0.10.2
- CVE-2026-69254Flowise: RCE via NodeVM Sandbox Escape in executeJavaScriptCode() nodeVMOptions Overridenpm · flowise, flowise-components · fixed in 3.1.3
- CVE-2026-69253Flowise Sandbox Escape to RCEnpm · flowise, flowise-components · fixed in 3.1.3
- CVE-2026-69252Flowise: Missing authorization on `/api/v1/files` allows low-privileged API keys to list and delete files across workspaces within the same organizationnpm · flowise · fixed in 3.1.3
- CVE-2026-68494jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for CVE-2026-18401 / GHSA-72hv-8253-57qq)Maven · com.fasterxml.jackson.core:jackson-core, tools.jackson.core:jackson-core · fixed in 2.18.8, 2.21.4, 3.1.4
- CVE-2026-69251Flowise RCE via TypeORM DataSourcenpm · flowise, flowise-components · fixed in 3.1.3
- CVE-2026-18401jackson-core: Number length constraint bypass in non-blocking (async) JSON parser leads to potential denial of serviceMaven · com.fasterxml.jackson.core:jackson-core, tools.jackson.core:jackson-core · fixed in 2.21.1, 2.18.6, 3.1.0
- CVE-2026-69250Flowise: Unauthenticated OAuth2 Refresh Enables Non-Blind SSRF and Secret Exfiltrationnpm · flowise · fixed in 3.1.3
- CVE-2026-10050Digest authentication lossy encodingMaven · org.eclipse.jetty.ee8:jetty-ee8-security, org.eclipse.jetty.ee9:jetty-ee9-security +1 · fixed in 12.0.36, 12.1.10, 9.4.63 and more
- CVE-2026-69249python-cryptography: Duplicate self-signed intermediates can cause exponential path-buildingPyPI · cryptography · fixed in 49.0.0
- CVE-2026-69248python-cryptography verifier accepts wildcard DNS names allowing escape from permittedSubtreesPyPI · cryptography · fixed in 49.0.0
- CVE-2026-69247cryptography: PKCS#7 EnvelopedData decryption exposes a Bleichenbacher oracle through distinguishable errors and timingPyPI · cryptography · fixed in 50.0.0
- CVE-2026-69246Guzzle: Noncanonical host can bypass host-based checksPackagist · guzzlehttp/guzzle · fixed in 7.15.2, 8.0.1
- CVE-2026-48113Chisel: ACL Bypass via Post-Handshake SSH Channel ExtraData InjectionGo · github.com/jpillora/chisel · fixed in 1.11.5
- CVE-2026-69245Guzzle: Noncanonical cookie domain keeps subdomain scopePackagist · guzzlehttp/guzzle · fixed in 7.15.2, 8.0.1
- CVE-2026-48063Baileys has message upsert / hist sync spoofing and app state corruption when using maliciously crafted protocolMessage payloadnpm · @whiskeysockets/baileys, baileys · fixed in 6.7.22, 7.0.0-rc12
- CVE-2026-69244AIOHTTP: Out-of-bounds heap read in C HTTP response parser error path (malformed chunked response)PyPI · aiohttp · fixed in 3.14.3
- CVE-2026-48061Litestar: AllowedHostsMiddleware bypasses host validation via client-controlled X-Forwarded-Host headerPyPI · litestar · fixed in 2.22.0