Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-67435linuxfabrik-lib: fetch() forwards credential headers across a cross-origin redirectPyPI · linuxfabrik-lib · fixed in 6.0.0
- CVE-2026-67432MCP Ruby SDK: Unbounded JSON-RPC request body causes uncontrolled memory allocation in StreamableHTTPTransportRubyGems · mcp · fixed in 0.23.0
- CVE-2026-67431MCP Ruby SDK: Ruby SSE Session PoisoningRubyGems · mcp · fixed in 0.23.0
- CVE-2026-63119MCP Ruby SDK: Unbounded line buffer in stdio transports leads to memory exhaustion (DoS)RubyGems · mcp · fixed in 0.23.0
- CVE-2026-67430MCP Ruby SDK: Unbounded session retention in StreamableHTTPTransport allows memory exhaustion via initialize floodRubyGems · mcp · fixed in 0.23.0
- CVE-2026-63118MCP Ruby SDK: Streamable HTTP transport lacks DNS-rebinding (Host/Origin) protectionRubyGems · mcp · fixed in 0.23.0
- CVE-2026-67429Flyto2 Core: Arbitrary file write via image.download (and other file-writing modules)PyPI · flyto-core · fixed in 2.26.7
- CVE-2026-67428Flyto2 Core: Multiple HTTP-family modules fetch client-controlled URLs without the SSRF guard their siblings apply (SSRF to internal/metadata)PyPI · flyto-core · fixed in 2.26.7
- CVE-2026-67427Flyto2 Core: ${env.VAR} interpolation reads any env secret despite env.get being denylistedPyPI · flyto-core · fixed in 2.26.7
- CVE-2026-67426Flyto2 Core: Unauthenticated flyto-verification /run: callback_url SSRF and internal runner-secret exfiltrationPyPI · flyto-core · fixed in 2.26.7
- CVE-2026-67425Flyto2 Core: LLM/API keys leak to an attacker-controlled base_urlPyPI · flyto-core · fixed in 2.26.7
- CVE-2026-13346pip absolute path traversal during download from malicious package indexesPyPI · pip · fixed in 26.2, 26.2.0
- CVE-2026-67424Flyto2 Core: Guarded HTTP modules follow redirects into internal space without per-hop SSRF revalidationPyPI · flyto-core · fixed in 2.26.7
- CVE-2026-59898Netty: WebSockets V07/V08 handshaker missing Connection/Upgrade validationMaven · io.netty:netty-codec-http · fixed in 4.2.16.Final, 4.1.136.Final
- CVE-2026-59899Netty HttpContentEncoder: Unbounded Per-Connection Queue Growth via HTTP/1.1 Pipelining Leads to Denial of ServiceMaven · io.netty:netty-codec-http · fixed in 4.2.16.Final, 4.1.136.Final
- CVE-2026-59900Netty codec-http2: Lack of Host Header Deduplication in HTTP/2→HTTP/1.x Translation Leads to Request Routing BypassMaven · io.netty:netty-codec-http2 · fixed in 4.2.16.Final, 4.1.136.Final
- CVE-2026-59901Netty Bzip2Decoder: Infinite Loop in RLE State Machine Leads to Event-Loop Thread HangMaven · io.netty:netty-codec, io.netty:netty-codec-compression · fixed in 4.1.136.Final, 4.2.16.Final
- CVE-2026-59919Netty: HAProxy V1 Protocol CRLF Injection via AF_UNIX AddressMaven · io.netty:netty-codec-haproxy · fixed in 4.2.16.Final, 4.1.136.Final
- CVE-2026-59920Netty: STOMP CONNECT Frame Header InjectionMaven · io.netty:netty-codec-stomp · fixed in 4.2.16.Final, 4.1.136.Final
- CVE-2026-54705mathlive's Lack of Escaping of HTML allows for XSSnpm · mathlive · fixed in 0.110.0
- CVE-2026-54680Logging operator has Fluentd configuration injection that allows remote code executionGo · github.com/kube-logging/logging-operator · fixed in 0.0.0-20260608145523-cf437d7f1e05
- CVE-2026-54693ZITADEL Users Can Self-Verify Email/Phone via APIGo · github.com/zitadel/zitadel · fixed in 1.80.0-v2.20.0.20260608144108-ed09b3df7f43
- CVE-2026-16729undici vulnerable to cookie attribute injection via unsanitized domain and unparsed setCookie fieldsnpm · undici · fixed in 6.28.0, 7.29.0, 8.9.0
- CVE-2026-54727proot-distro has a Container Isolation Bypass via Crafted Restore ArchivePyPI · proot-distro · fixed in 5.1.6
- CVE-2026-13697undici vulnerable to cross-user information disclosure and parse-time crash via degenerate private cache directivesnpm · undici · fixed in 7.29.0, 8.9.0
- CVE-2026-54574`proot-distro install` has a Symlink Escape (Arbitrary Host File Write) via Malicious Tar ArchivePyPI · proot-distro · fixed in 5.1.5
- CVE-2026-54735prebid-server's request forgery vulnerability allows for possible host environment data extractionGo · github.com/prebid/prebid-server, github.com/prebid/prebid-server/v2 +2 · fixed in 4.4.0
- CVE-2026-50558Penelope unsafe tar extraction allows arbitrary local file write via crafted session archivePyPI · penelope-shell-handler · fixed in 0.20.0
- CVE-2026-54081veraPDF Parser DoS via PostScript Type 1 Font ProgramsMaven · org.verapdf:parser · fixed in 1.30.2, 1.31.23
- CVE-2026-54080veraPDF Parser DoS via PostScript CMap StreamsMaven · org.verapdf:parser · fixed in 1.30.2, 1.31.23