Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-45368Kirby: Cross-site scripting (XSS) from links in KirbyTags and image blocks in the site frontendPackagist · getkirby/cms · fixed in 4.9.1, 5.4.1
- CVE-2026-45334Kirby: Content locks disclose IDs and emails of inaccessible users from `users.access/list` permissionsPackagist · getkirby/cms · fixed in 4.9.1, 5.4.1
- CVE-2026-44175Kirby: Cross-site scripting (XSS) from list field content in the site frontendPackagist · getkirby/cms · fixed in 4.9.1, 5.4.1
- CVE-2026-44176Kirby: `pages.access` permission is not checked during rendering of page draftsPackagist · getkirby/cms · fixed in 4.9.1, 5.4.1
- CVE-2026-44177Kirby: Pre-authentication path traversal and PHP file inclusion during user lookupPackagist · getkirby/cms · fixed in 5.4.1
- CVE-2026-44174Kirby: Arbitrary Method Call via REST API search and collection query endpointsPackagist · getkirby/cms · fixed in 4.9.1, 5.4.1
- CVE-2026-44023Docling Core has unsafe remote filename resolutionPyPI · docling-core · fixed in 2.74.1
- CVE-2026-44019Docling Core has insufficient validation of image reference URIsPyPI · docling-core · fixed in 2.74.1
- CVE-2026-33731AVideo has an Authorize.Net Webhook Signature Bypass that Enables Wallet Balance Inflation via Forged Payment DataPackagist · wwbn/avideo · fixed in 29.0
- CVE-2026-55173AVideo incomplete fix for CVE-2026-33482: sanitizeFFmpegCommand still allows a single '&' (background operator), giving OS command execution at the same execAsync sh -c sinkPackagist · wwbn/avideo
- CVE-2026-33692AVideo Has Unauthenticated .env File Exposure via Official Docker Compose ConfigurationPackagist · wwbn/avideo · fixed in 29.0
- CVE-2026-44982CrowdSec AppSec silently drops request body for chunked / HTTP-2 requestsGo · github.com/crowdsecurity/crowdsec · fixed in 1.7.8
- CVE-2026-44981CrowdSec LAPI: Denial of Service via Unbounded Gzip DecompressionGo · github.com/crowdsecurity/crowdsec · fixed in 1.7.8
- CVE-2026-62994CoreDNS `k8s_external` headless AXFR can emit an empty transfer batch that panics the `transfer` pluginGo · github.com/coredns/coredns · fixed in 1.14.5
- CVE-2026-62290cert-manager: Direct ACME Challenge resources can bypass Issuer DNS01 solver policy and use ClusterIssuer DNS credentialsGo · github.com/cert-manager/cert-manager · fixed in 1.19.6, 1.20.3
- CVE-2026-49998Centrifugo: Dynamic JWKS key cache keyed only by `kid` allows cross-issuer JWT authentication bypassGo · github.com/centrifugal/centrifugo, github.com/centrifugal/centrifugo/v3 +3 · fixed in 6.8.1
- CVE-2026-63397remorses/genql code injectionnpm · @genql/cli · fixed in 6.3.4
- CVE-2026-55629Whistle: Path traversalnpm · whistle · fixed in 2.10.3
- CVE-2026-54526Argo Workflows: Incomplete fix for CVE-2026-31892: ArtifactGC.PodSpecPatch bypass of Strict/Secure templateReferencingGo · github.com/argoproj/argo-workflows, github.com/argoproj/argo-workflows/v2 +2 · fixed in 3.7.15, 4.0.6
- CVE-2026-46338PyMdown Extensions: Regression in pymdownx.snippets reintroduces sibling-prefix path traversal bypass despite restrict_base_pathPyPI · pymdown-extensions · fixed in 10.21.3
- CVE-2026-46377Dasel: Index-out-of-range panic in dasel selector lexer on trailing backslash in quoted stringGo · github.com/tomwright/dasel, github.com/tomwright/dasel/v2 +1
- CVE-2026-46378Dasel: Denial of service in dasel selector lexer due to infinite loop on unterminated regex literalGo · github.com/tomwright/dasel, github.com/tomwright/dasel/v2 +1 · fixed in 3.10.1
- CVE-2026-44969dbt-mcp: Tool Arguments Including SQL Queries and Credentials Logged in Plaintext Without Redaction When File Logging Is EnabledPyPI · dbt-mcp · fixed in 1.17.1
- CVE-2026-44970dbt-mcp: All MCP Tool Arguments Including Raw SQL and --vars Credentials Transmitted to dbt Labs Telemetry by Default Without RedactionPyPI · dbt-mcp · fixed in 1.17.1
- CVE-2026-44968dbt-mcp: Argument Injection in dbt CLI Tool Wrappers via node_selection and resource_type ParametersPyPI · dbt-mcp · fixed in 1.17.1
- CVE-2026-46341Apify MCP server: Domain Allowlist Bypass in fetch-apify-docs via String Prefix Matchingnpm · @apify/actors-mcp-server · fixed in 0.9.21
- CVE-2026-45367HAPI FHIR: ReDoS via FHIRPath matches()/replaceMatches() in FHIR Validator HTTP EndpointMaven · ca.uhn.hapi.fhir:org.hl7.fhir.dstu2, ca.uhn.hapi.fhir:org.hl7.fhir.dstu2016may +6 · fixed in 6.9.7
- CVE-2026-45576zrok copy writes attacker-controlled WebDAV paths outside the destination rootGo · github.com/openziti/zrok, github.com/openziti/zrok/v2 · fixed in 2.0.3
- CVE-2026-45568zrok Python ProxyShare can be used as an SSRF proxy through absolute URL pathsPyPI · zrok
- CVE-2026-45325Gestor de Oferta: Prototype pollution in @tmlmobilidade/utils setValueAtPathnpm · @tmlmobilidade/utils · fixed in 20260509.340.15