Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-45623PostCSS: Arbitrary file read and information disclosure via attacker-controlled sourceMappingURL in CSS commentsnpm · postcss · fixed in 8.5.12
- CVE-2026-54272ip-address: Misclassification of IPv4-mapped/NAT64 IPv6 addresses can bypass SSRF and trust-boundary checksnpm · ip-address · fixed in 10.2.1
- CVE-2026-66394SiYuan before v3.7.3 Stored and Reflected XSS via SVG Sanitizer BypassGo · github.com/siyuan-note/siyuan/kernel · fixed in 0.0.0-20260714095344-f08dee71ba8e
- CVE-2026-66053Apache Thrift: Python TSSLSocket Hostname Matcher ImportPyPI · thrift · fixed in 0.24.0
- CVE-2026-43871Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: TCompactProtocol varint byte-count limitPyPI · thrift · fixed in 0.24.0
- CVE-2026-41608Apache Thrift: Unbounded Zlib Decompression in Python THeaderTransportPyPI · thrift · fixed in 0.24.0
- CVE-2026-66011ImageMagick before 7.1.2-27 Memory Leak via Invalid CLI OptionsNuGet · magick.net-q16-anycpu, magick.net-q16-arm64 +15 · fixed in 14.15.0
- CVE-2025-71408NLTK < 3.9.3 Eval Injection via collocations.py Command-Line ArgumentsPyPI · nltk · fixed in 3.9.3
- CVE-2026-48037Hulumi: AccountFoundation reuse paths silently downgrade GuardDuty / Security Hub posturenpm · @hulumi/baseline · fixed in 1.4.0
- CVE-2026-48036Hulumi: Drift classifier fails open on adapter errors and over-promotes Mixed verdictsnpm · @hulumi/drift · fixed in 1.4.0
- CVE-2026-48035Hulumi: AccountFoundation audit-delivery S3 bucket could be silently weakenednpm · @hulumi/baseline · fixed in 1.4.0
- CVE-2026-48033Hulumi: Policy packs bypassed by a forged Pulumi-URN logical namenpm · @hulumi/policies · fixed in 1.4.0
- CVE-2026-48032Hulumi: IAM-role policy checks bypassed when the role trusts multiple OIDC providersnpm · @hulumi/policies · fixed in 1.4.0
- CVE-2026-48034HULUMI-H5 bypass via decoy sibling resources targeting a different bucketnpm · @hulumi/policies · fixed in 1.4.0
- CVE-2026-66007Datasets Path Traversal via Unsanitized file_name MetadataPyPI · datasets · fixed in 5.0.1
- CVE-2026-66004BlenderMCP Path Traversal via download_polyhaven_asset APIPyPI · blender-mcp · fixed in 1.6.5
- CVE-2026-66010DOMPurify before 3.4.12 Hook Bypass via CUSTOM_ELEMENT_HANDLINGnpm · dompurify · fixed in 3.4.12
- CVE-2026-47724nebula-mesh: API endpoints lack ownership checks, enabling cross-operator privilege escalationGo · github.com/juev/nebula-mesh · fixed in 0.3.4
- CVE-2026-47723nebula-mesh: Web UI and API responses lack security headers (CSP, X-Frame-Options, HSTS, etc.)Go · github.com/juev/nebula-mesh · fixed in 0.3.1
- CVE-2026-16796Improper neutralization of argument delimiters in AWS Bedrock AgentCore Python SDK install_packages()PyPI · bedrock-agentcore · fixed in 1.18.1
- CVE-2026-47722nebula-mesh: Host advanced overrides allow YAML injection into agent config.ymlGo · github.com/juev/nebula-mesh · fixed in 0.3.2
- CVE-2026-48012Shopware SSO referer trust leading to an arbitrary redirect targetPackagist · shopware/core, shopware/platform · fixed in 6.7.10.1
- CVE-2026-48013Shopware: SSRF in Media External-Link Endpoint Bypasses IP ValidationPackagist · shopware/core, shopware/platform · fixed in 6.7.10.1
- CVE-2026-47669DbGate: Zip Slip in archive/unzip allows arbitrary file write leading to RCEnpm · dbgate · fixed in 7.1.9
- CVE-2026-47670DbGate Vulnerable to Authenticated Remote Code Execution via loadReader functionName code injectionnpm · dbgate-api · fixed in 7.1.9
- CVE-2026-25800quinn-proto has remote memory exhaustion from unbounded out-of-order stream reassemblycrates.io · quinn-proto · fixed in 0.11.15
- CVE-2026-16756Allocation of resources without limits in the default aws-smithy-http-server serve() path allows unauthenticated Slowloris denial of servicecrates.io · aws-smithy-http-server · fixed in 0.66.5
- CVE-2026-47668DbGate: Unauthenticated Remote Code Execution via JSON Script Runnernpm · dbgate-serve · fixed in 7.1.9
- CVE-2026-44210Kata Containers have VM Escape via virtiofsd Argument Injection through Default-Enabled Pod AnnotationsGo · github.com/kata-containers/kata-containers · fixed in 0.0.0-20260519062212-ffa59ce3aa78
- CVE-2026-47743Shopper: Multiple data integrity and disclosure issues in admin Livewire componentsPackagist · shopper/framework · fixed in 2.8.0