Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-47415praisonai-platform: Issue endpoints accept any issue_id without workspace ownership check, cross-workspace read/update/delete IDORPyPI · praisonai-platform · fixed in 0.1.4
- CVE-2026-47414praisonai-platform: Label endpoints accept any label_id and any issue_id without workspace ownership check, cross-workspace label edit/delete and issue-label-link IDORPyPI · praisonai-platform · fixed in 0.1.4
- CVE-2026-47413praisonai-platform: Any workspace member can add arbitrary user as owner via POST /workspaces/{id}/membersPyPI · praisonai-platform · fixed in 0.1.4
- CVE-2026-47412praisonai-platform: Any workspace member can delete the entire workspace via DELETE /workspaces/{id}PyPI · praisonai-platform · fixed in 0.1.4
- CVE-2026-47411praisonai-platform: Any workspace member can rewrite workspace name, description, and settings via PATCH /workspaces/{id}PyPI · praisonai-platform · fixed in 0.1.4
- CVE-2026-47410praisonai-platform: JWT signing key defaults to hardcoded "dev-secret-change-me", allowing token forgery for any user when PLATFORM_ENV is unsetPyPI · praisonai-platform · fixed in 0.1.4
- CVE-2026-47409praisonai-platform: Any workspace member can remove any other member (including the owner) via DELETE /workspaces/{id}/members/{user_id}PyPI · praisonai-platform · fixed in 0.1.4
- CVE-2026-47408praisonai-platform: list_issue_activity returns activity log for any issue regardless of workspace ownershipPyPI · praisonai-platform · fixed in 0.1.4
- CVE-2026-47407PraisonAI Platform has a cross-workspace IDOR + member-role privilege escalationPyPI · praisonai-platform · fixed in 0.1.4
- CVE-2026-16454Privilege Escalation in Eclipse hawkBit DDI allows Tenant-Isolated Firmware ExfiltrationMaven · org.eclipse.hawkbit:hawkbit-ddi-resource · fixed in 1.0.4
- CVE-2026-47406praisonai-platform: Dependency endpoints accept any issue_id and dep_id without workspace ownership check, cross-workspace issue linking + read + delete IDORPyPI · praisonai-platform · fixed in 0.1.4
- CVE-2026-47405PraisonAI Platform missing role checks let any workspace member become owner and take over workspace membershipPyPI · praisonai-platform · fixed in 0.1.4
- CVE-2026-47399PraisonAI Platform workspace-scoped routes allow cross-workspace object access by global object IDPyPI · praisonai-platform · fixed in 0.1.4
- CVE-2026-44907A denial of service vulnerability could be triggered by sending specially crafted HTTP requests to server function endpoints, this could leanpm · react-server-dom-parcel, react-server-dom-turbopack +1 · fixed in 19.1.9, 19.2.8, 19.0.8
- CVE-2026-47398PraisonAI: Arbitrary code execution via unguarded `spec.loader.exec_module` in `agents_generator.py` - sibling of CVE-2026-44334PyPI · praisonai · fixed in 4.6.40
- CVE-2026-47397PraisonAI has an Arbitrary File Write in Python APIPyPI · praisonai · fixed in 4.6.40
- CVE-2026-47396PraisonAI call server exposes unauthenticated agent listing, invocation, and deletion when CALL_SERVER_TOKEN is unsetPyPI · praisonai · fixed in 4.6.40
- CVE-2026-47395PraisonAI CLI automatically resolves @url mentions in prompt text and can read loopback URLs into model contextPyPI · praisonai, praisonaiagents · fixed in 4.6.40, 1.6.40
- CVE-2026-47394PraisonAI vulnerable to unauthenticated arbitrary file read via MCP workflow.show, workflow.validate, deploy.validatePyPI · praisonai · fixed in 4.6.40
- CVE-2026-64825Home Assistant Core < 2026.6.0 Path Traversal File Write via Backup UploadPyPI · homeassistant · fixed in 2026.6.0
- CVE-2026-64824Home Assistant Core < 2026.7.0 Symlink Path Traversal RCE via backup-restorePyPI · praisonai · fixed in 4.6.40
- CVE-2026-47393PraisonAI `deploy --type api` emits a Flask server with authentication disabled by defaultPyPI · praisonai · fixed in 4.6.40
- CVE-2026-47392PraisonAI vulnerable to sandbox escape via `print.__self__` builtins module leak in `execute_code` (subprocess mode)PyPI · praisonai, praisonaiagents · fixed in 4.6.40, 1.6.40
- CVE-2026-47391PraisonAI's unauthenticated A2A official example can reach real LLM-driven `eval()` tool executionPyPI · praisonai · fixed in 4.6.40
- CVE-2026-47390PraisonAI spider_tools SSRF protection bypass via alternate loopback host encodingsPyPI · praisonai, praisonaiagents · fixed in 4.6.40, 1.6.40
- CVE-2026-46681@nevware21/ts-utils: Prototype Pollution in objDeepCopy/objCopyProps via for...in without hasOwnPropertynpm · @nevware21/ts-utils · fixed in 0.14.0
- CVE-2026-65008Grav before 2.0.7 Remote Code Execution via Blueprint dynamicDataPackagist · getgrav/grav · fixed in 2.0.7
- CVE-2026-55833Netty SPDY zlib header block continues decoded expansion after maxHeaderSize truncationMaven · io.netty:netty-codec-http · fixed in 4.2.16.Final, 4.1.136.Final
- CVE-2026-55831Netty SPDY SETTINGS frame count materializes unbounded settings mapMaven · io.netty:netty-codec-http · fixed in 4.2.16.Final, 4.1.136.Final
- CVE-2026-57495AgenticMail: Unauthenticated inbound mail triggers bypassPermissions resume of the operator's Claude Code session (bridge-wake)npm · @agenticmail/claudecode, @agenticmail/codex +2 · fixed in 0.2.39, 0.1.33, 0.9.43 and more