Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-118772joi: quadratic-time split in `string().email({ multiple: true })` allows denial of servicenpm · @hapi/joi, joi · fixed in 17.13.9, 18.3.1
- CVE-2026-118764minimatch: potential denial of service via globparts amplificationnpm · minimatch · fixed in 11.0.1
- CVE-2026-118763@sigstore/oci sends the registry Authorization header to a cross-host blob-upload Locationnpm · @sigstore/oci · fixed in 0.7.2
- GHSA-VPP8-G58W-M8MPTwisted: Unauthenticated Remote Denial of Service in the Twisted HTTP/2 Server via Rapid Stream ResetPyPI · twisted · fixed in 26.10.0rc1
- CVE-2026-118761Kubeflow Pipelines: Pipeline archive upload allows decompression bomb to exhaust server memoryGo · github.com/kubeflow/pipelines · fixed in 0.0.0-20260831164314-ba9ae72cc860
- GHSA-W9X9-J56R-H98R@eeacms/volto-chatbot has Unauthenticated Danswer API Confused Deputy Proxynpm · @eeacms/volto-chatbot · fixed in 2.0.4
- GHSA-C33X-VCV4-VG3GCedar: JSON template is in scope missing slot-id validation allows link panic and decision divergencenpm · @cedar-policy/cedar-wasm · fixed in 4.11.1, 3.4.3
- CVE-2026-118759Kubeflow Pipelines: Run log streaming endpoint bypasses namespace authorization, exposing pod execution logs cross-tenantGo · github.com/kubeflow/pipelines · fixed in 0.0.0-20260904182349-be4723e33727
- CVE-2026-62374SD JWT JS: Tampered disclosures silently dropped instead of rejectednpm · @sd-jwt/core, @sd-jwt/decode · fixed in 0.20.0
- CVE-2026-119143Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 Panic via Zero-Length Stream Writescrates.io · wasmtime · fixed in 48.0.6, 49.0.3
- CVE-2026-119142Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 Host Panic via call_async Dropcrates.io · wasmtime · fixed in 48.0.6, 49.0.3
- CVE-2026-119140Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 Host Panic via thread.yieldcrates.io · wasmtime · fixed in 48.0.6, 49.0.3
- CVE-2026-119139Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 Host Panic via Func::callcrates.io · wasmtime · fixed in 48.0.6, 49.0.3
- CVE-2026-119138Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 Panic After Trapcrates.io · wasmtime · fixed in 48.0.6, 49.0.3
- CVE-2026-119137Wasmtime 42.0.0 before 48.0.6 and 49.0.0 before 49.0.3 Stack Overflow via Type Registrycrates.io · wasmtime · fixed in 48.0.6, 49.0.3
- CVE-2026-119136Wasmtime 42.0.0 before 48.0.6 and 49.0.0 before 49.0.3 Async-Entrypoint Enforcement Bypasscrates.io · wasmtime · fixed in 48.0.6, 49.0.3
- CVE-2026-119135Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 Panic via StreamReader Type Mismatchcrates.io · wasmtime · fixed in 48.0.6, 49.0.3
- CVE-2026-119132Wasmtime 49.0.0 before 49.0.3 Host Panic via Overlapping String Transcode in Fused Adaptercrates.io · wasmtime · fixed in 49.0.3
- CVE-2026-119131Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 Host Panic via wasi-httpcrates.io · wasmtime-wasi-http · fixed in 48.0.6, 49.0.3
- CVE-2026-119130Wasmtime before 36.0.18, 37.0.0 before 48.0.6, and 49.0.0 before 49.0.3 HTTP Request Target Smugglingcrates.io · wasmtime-wasi-http · fixed in 36.0.18, 48.0.6, 49.0.3
- RUSTSEC-2026-0419Unbounded memory use on large request bodiescrates.io · juniper_warp · fixed in 0.9.1
- RUSTSEC-2026-0420wasip3 UDP `send` can deliver a datagram to an address only allowed for receivingcrates.io · wasmtime-wasi · fixed in 48.0.8, 49.0.5, 50.0.1
- RUSTSEC-2026-0421wasi-http p2: outgoing content-length can be invalid or not match bodycrates.io · wasmtime-wasi-http · fixed in 36.0.20, 48.0.8, 49.0.5 and more
- RUSTSEC-2026-0422Typed functions with `i31` or `nullref` arguments may panic due to insufficient type-checkcrates.io · wasmtime · fixed in 48.0.8, 49.0.5, 50.0.1
- RUSTSEC-2026-0423Cross-engine type confusion with host-created struct-types-with-supertypescrates.io · wasmtime · fixed in 48.0.8, 49.0.5, 50.0.1
- RUSTSEC-2026-0424Unchecked memory usage in transferring borrowed resources between componentscrates.io · wasmtime · fixed in 36.0.20, 48.0.8, 49.0.5 and more
- RUSTSEC-2026-0427`sn-releases`: `extract_release_archive` writes archive entries without a path-traversal check (zip-slip)crates.io · sn-releases
- CVE-2026-118669OAuthLib: Token grants can use attacker-supplied client_id for authorization after authenticating a different clientPyPI · oauthlib · fixed in 4.0.0
- CVE-2026-118668LangGraph JavaScript custom authentication may permit cross-user Store accessPyPI · langgraph-api · fixed in 0.15.0
- CVE-2026-118667LangGraph: Unencoded identifiers in LangGraph SDK v3 streaming can redirect authenticated GET requestsPyPI · langgraph, langgraph-sdk · fixed in 1.2.14, 0.4.6