Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-57495AgenticMail: Unauthenticated inbound mail triggers bypassPermissions resume of the operator's Claude Code session (bridge-wake)npm · @agenticmail/claudecode, @agenticmail/codex +2 · fixed in 0.2.39, 0.1.33, 0.9.43 and more
- CVE-2026-57494AgenticMail: Cross-agent task authorization bypass in AgenticMail APInpm · @agenticmail/api · fixed in 0.9.64
- CVE-2026-47255AgenticMail API/storage and outbound relay hardeningnpm · @agenticmail/api, @agenticmail/core · fixed in 0.9.32, 0.9.10
- CVE-2026-47144Shamefile has an arbitrary file read via shamefile.yaml in shame nextnpm · shamefile · fixed in 0.1.7
- CVE-2026-47128nono: Sandbox escape on Linux via D-Bus: `systemd-run --user`crates.io · nono-cli · fixed in 0.55.0
- CVE-2026-55219Paymenter: Race condition in payWithCredit() enables credit double-spendPackagist · paymenter/paymenter · fixed in 1.5.5
- CVE-2026-47198Paymenter: URL parameter injection bypasses paid plan limits at checkoutPackagist · paymenter/paymenter · fixed in 1.5.1
- CVE-2026-44585Paymenter: Broken object level authorization via service reference manipulation on ticket creationPackagist · paymenter/paymenter · fixed in 1.5.0
- CVE-2026-44583Paymenter: Blind Unauthenticated SSRF on the Paypal gateway modulePackagist · paymenter/paymenter · fixed in 1.5.0
- CVE-2026-44584Paymenter doesn't reset email verification status after email changePackagist · paymenter/paymenter · fixed in 1.5.0
- CVE-2026-46715Flask-Security-Too OAuth reauthentication freshness bypass via cross- user OAuth identity acceptancePyPI · flask-security-too · fixed in 5.8.1
- CVE-2026-58484Network-AI: Poisoned environment backup manifest allows arbitrary recursive deletion during backup pruningnpm · network-ai · fixed in 5.12.2
- CVE-2026-40187Authenticated RCE via Malicious eTemplate Upload in EGroupwarePackagist · egroupware/egroupware · fixed in 26.4.20260413, 23.1.20260601
- CVE-2026-58482Network-AI: ApprovalInbox HTTP server has no authentication — anyone can approve pending agent actionsnpm · network-ai · fixed in 5.12.2
- CVE-2026-46701Network-AI: Unauthenticated Cross-Origin MCP Tool Invocation via Empty Default Secretnpm · network-ai · fixed in 5.4.5
- CVE-2026-58481Network-AI: AgentRuntime sandbox path-prefix checks allow file access outside the configured base directorynpm · network-ai · fixed in 5.12.2
- CVE-2026-58414Network-AI: EnvironmentManager.backup() follows symlinked directories and copies files outside the environment root into backupsnpm · network-ai · fixed in 5.12.2
- CVE-2026-58413EnvironmentManager.restore() backup ID path traversal copies arbitrary directories into environment datanpm · network-ai · fixed in 5.12.2
- CVE-2026-54051Network-AI has an an OS Command Injection issuenpm · network-ai · fixed in 5.9.1
- CVE-2026-46671Rust OneNote File Parser: Path traversal in `Parser::parse_notebook` allows reading files outside the notebook directorycrates.io · onenote_parser · fixed in 1.1.1
- CVE-2026-46428lettre has TLS hostname verification disabled when using Boring TLS backendcrates.io · lettre · fixed in 0.11.22
- CVE-2026-27823Remote Code Execution Vulnerability in EGroupwarePackagist · egroupware/egroupware · fixed in 26.2.20260224, 23.1.20260224
- CVE-2026-46415Caddy Defender trusted proxy client IP bypassGo · pkg.jsn.cam/caddy-defender · fixed in 0.10.1
- CVE-2026-48824Mailpit: Sibling-endpoint memory-exhaustion DoS via unbounded JSON body on /api/v1/messages, /api/v1/tags, and /api/v1/message/{id}/release (incomplete fix of GHSA-fpxj-m5q8-fphw)Go · github.com/axllent/mailpit · fixed in 1.30.1
- CVE-2026-45713Mailpit: Unauthenticated remote memory-exhaustion DoS via unlimited SMTP DATA and /api/v1/send body sizesGo · github.com/axllent/mailpit · fixed in 1.30.0
- CVE-2026-45712Mailpit: Concurrent map read & write in proxy CSS rewriter - remote unauth crash (fatal error: concurrent map read and map write)Go · github.com/axllent/mailpit · fixed in 1.30.0
- CVE-2026-45711Mailpit: Path traversal & arbitrary file write in mailpit dump --http via attacker-controlled message IDsGo · github.com/axllent/mailpit · fixed in 1.30.0
- CVE-2026-45709Mailpit has an incomplete fix for GHSA-6jxm: HTML check still permits SSRF to private/loopback/IMDS via missing IP-filter dialerGo · github.com/axllent/mailpit · fixed in 1.30.0
- CVE-2026-46412Malicious code in @beproduct/nestjs-auth (0.1.2 through 0.1.19) — Mini Shai-Hulud wormnpm · @beproduct/nestjs-auth
- CVE-2026-54910FileBrowser Quantum's path traversal issue in subtitle handler allows any authenticated user to read arbitrary filesGo · github.com/gtsteffaniak/filebrowser/backend · fixed in 0.0.0-20260608182036-f3f4bbe80cb5