Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-65590n8n before 2.30.1 Shell Sandbox Bypass on Linux Windowsnpm · n8n · fixed in 2.30.1, 2.29.8
- CVE-2026-65589n8n before 1.123.64 Credential Exposure via LLM Node Execution Datanpm · n8n · fixed in 1.123.64, 2.30.1, 2.29.8
- CVE-2026-65016n8n before 1.123.64, 2.29.8, and 2.30.1 Privilege Escalation via SSO Instance-Rolenpm · n8n · fixed in 1.123.64, 2.30.1, 2.29.8
- CVE-2026-65015n8n before 2.30.1 Privilege Escalation via run_node_toolnpm · n8n · fixed in 2.30.1, 2.29.8
- CVE-2026-65014n8n before 2.28.0 Authentication Bypass via test-webhooknpm · n8n · fixed in 2.27.4
- CVE-2026-45820fflate through 0.8.2 is vulnerable to denial of service via an infinite loop in unzipSync().npm · fflate · fixed in 0.4.9, 0.5.4, 0.6.11 and more
- CVE-2026-56820Netty: Missing CertificateID Validation in OCSP Response Allows Replay AttacksMaven · io.netty:netty-handler-ssl-ocsp · fixed in 4.2.16.Final, 4.1.136.Final
- CVE-2026-56819Netty: HTTP/2 decompression leaks ByteBuf reference count when the decompressor channel is already closed (Direct memory leak / OOM DoS)Maven · io.netty:netty-codec-http2 · fixed in 4.2.16.Final, 4.1.136.Final
- CVE-2026-56817Netty: XML External Entity (XXE) injection via unconfigured XML factory when DTD and entity processing are enabledMaven · io.netty:netty-codec-xml · fixed in 4.2.16.Final, 4.1.136.Final
- CVE-2026-56816Netty: Memory Exhaustion via HTTP/3 Reserved Frame TypesMaven · io.netty:netty-codec-http3 · fixed in 4.2.16.Final
- CVE-2026-47731NASA AMMOS Instrument Toolkit: Path traversal resulting in arbitrary file append (can be triggered over the network by unauthenticated attacker)PyPI · ait-core · fixed in 2.6.1, 3.1.1
- CVE-2026-56746Netty has a Security Control Bypass via CORS Short-Circuit FailureMaven · io.netty:netty-codec-http · fixed in 4.2.16.Final, 4.1.136.Final
- CVE-2026-43947FUXA Vulnerable to Unauthenticated Remote Code Execution via Script Test Mode Authorization Bypassnpm · fuxa-server · fixed in 1.3.1
- CVE-2026-56745Netty SpdyHttpDecoder: ByteBuf Reference Leak on RST_STREAM Leads to Native Memory ExhaustionMaven · io.netty:netty-codec-http · fixed in 4.2.16.Final, 4.1.136.Final
- CVE-2026-43946FUXA has an unauthenticated arbitrary tag value disclosure via /api/getTagValuenpm · fuxa-server · fixed in 1.3.1
- CVE-2026-43945FUXA Vulnerable to Pre-auth RCE via Path Manipulation & Configuration Injectionnpm · @frangoteam/fuxa · fixed in 1.3.1
- CVE-2026-55851Netty codec-haproxy: Signed-Byte Sentinel Collision in HAProxyMessageDecoder Leads to Unbounded Memory ExhaustionMaven · io.netty:netty-codec-haproxy · fixed in 4.2.16.Final, 4.1.136.Final
- CVE-2026-47708MCP-for-Stata: Command injection via log_file_name parameter in Stata command wrapperPyPI · stata-mcp · fixed in 1.17.3
- CVE-2026-47695CC-Tweaked has an SSRF Protection Bypass with NAT64Maven · cc.tweaked:cc-tweaked-1.19.3-core, cc.tweaked:cc-tweaked-1.19.4-core +6 · fixed in 1.119.0
- CVE-2026-46556FlaskBB: SSRF in get_image_info() via unrestricted avatar URLPyPI · flaskbb
- CVE-2026-47143Capstone has a NULL Pointer Dereference with 3DNow! opcodesPyPI · capstone · fixed in 5.0.8
- CVE-2026-47671Nhost CLI local configserver allows cross-origin unauthenticated read/write access to local development configuration and secretsGo · github.com/nhost/nhost · fixed in 0.0.0-20260518172022-e407511627d2
- CVE-2026-46403Klever-Go KVM read-only execution can commit contract delete and upgrade side effectsGo · github.com/klever-io/klever-go · fixed in 1.7.17
- CVE-2026-56852Infinite loop on invalid input in golang.org/x/textGo · golang.org/x/text · fixed in 0.39.0
- CVE-2026-46600Parsing an invalid SVCB or HTTPS RR can panic in golang.org/x/net/dns/dnsmessageGo · golang.org/x/net, stdlib · fixed in 0.56.0, 1.26.6, 1.27.0-rc.3
- CVE-2026-47425Rattler vulnerable to entry-point path traversal in noarch:python install (arbitrary file write)PyPI · py-rattler · fixed in 0.24.0
- CVE-2026-47419praisonai-platform: Agent endpoints accept any agent_id without workspace ownership check, cross-workspace read/update/delete IDORPyPI · praisonai-platform · fixed in 0.1.4
- CVE-2026-47418praisonai-platform: Project endpoints accept any project_id without workspace ownership check, cross-workspace read/update/delete IDORPyPI · praisonai-platform · fixed in 0.1.4
- CVE-2026-47417praisonai-platform: Comment endpoints accept any issue_id without workspace ownership check, cross-workspace comment read and post IDORPyPI · praisonai-platform · fixed in 0.1.4
- CVE-2026-47416praisonai-platform: Any workspace member can promote themselves (or any other member) to owner via PATCH /workspaces/{id}/members/{user_id}PyPI · praisonai-platform · fixed in 0.1.4