Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-566789Router: Kiro region injection allows authenticated SSRF with Authorization header forwardingnpm · 9router · fixed in 0.5.6
- CVE-2026-566799Router: Mass assignment in PATCH /api/settings allows authenticated authorization downgradenpm · 9router · fixed in 0.5.4
- CVE-2026-493539Router: Local-Only Access Gate Bypass in 9router via Host Header SpoofINGnpm · 9router
- CVE-2026-33684AVideo's Privilege AVideo: Escalation via Unguarded Permission Parameters in signUp API Allows Self-Granting Upload/Stream/Meet PermissionsPackagist · wwbn/avideo · fixed in 29.0
- CVE-2026-493529Router: Hardcoded Default fallback JWT Secret Allows Authentication Bypassnpm · 9router · fixed in 0.4.45
- CVE-2026-463399Router: Unauthenticated Remote Code Execution via unprotected MCP custom plugin routesnpm · 9router · fixed in 0.4.37
- CVE-2026-55608n8n-MCP: Incorrect authorization can expose default-scope workflow version backups in multi-tenant HTTP modenpm · n8n-mcp · fixed in 2.57.4
- CVE-2026-54052n8n-MCP: Cross-tenant access to workflow version backups in multi-tenant HTTP deploymentsnpm · n8n-mcp · fixed in 2.56.1
- CVE-2026-55410NocoBase backup restore schema name allows command injectionnpm · @nocobase/plugin-backups · fixed in 2.1.19
- CVE-2026-52887NocoBase: SQL injection in /api/myInAppChannels:list filter to PG-superuser RCEnpm · @nocobase/plugin-notification-in-app-message · fixed in 2.0.61
- CVE-2026-52888NocoBase: Sensitive Data Exposure via SQL Blacklist Bypassnpm · @nocobase/plugin-collection-sql · fixed in 2.0.62, 2.1.0-alpha.46, 2.1.0-beta.45
- CVE-2026-59950MCP Python SDK: WebSocket server transport does not support Host/Origin validationPyPI · mcp · fixed in 1.28.1
- CVE-2026-52870MCP Python SDK: Experimental task handlers allow any client to access and cancel other clients' tasksPyPI · mcp · fixed in 1.27.2
- CVE-2026-52869MCP Python SDK: HTTP transports serve session requests without verifying the authenticated principalPyPI · mcp · fixed in 1.27.2
- CVE-2026-45737Argo CD: Kubernetes Secret Extraction via ArgoCD ServerSideDiff via sensitive annotationsGo · github.com/argoproj/argo-cd, github.com/argoproj/argo-cd/v2 +1 · fixed in 3.2.12, 3.3.10, 3.4.2
- CVE-2026-45738Argo CD: Stored XSS in application link annotations enables developer-to-admin privilege escalationGo · github.com/argoproj/argo-cd, github.com/argoproj/argo-cd/v2 +1 · fixed in 3.2.12, 3.3.10, 3.4.2
- CVE-2026-56743Cilium may unexpectedly allow ingress traffic from the local namespace when a Kubernetes NetworkPolicy is configured with an ipBlock matchGo · github.com/cilium/cilium · fixed in 1.19.5
- CVE-2026-56742Cilium: Namespaced HTTPRoutes can redirect traffic to other namespacesGo · github.com/cilium/cilium, github.com/cilium/ciliumcilium · fixed in 1.17.17, 1.19.5, 1.18.11
- CVE-2026-49445Cilium: Sensitive information disclosure and cluster disruption via local Envoy admin socket accessGo · github.com/cilium/cilium · fixed in 1.17.14, 1.18.8, 1.19.2
- CVE-2026-15895OS command injection in jsii-diff in AWS jsiinpm · jsii-diff · fixed in 1.131.0
- CVE-2026-46421Supply chain compromise via malicious package versions (@cap-js/sqlite, @cap-js/postgres, @cap-js/db-service)npm · @cap-js/db-service, @cap-js/postgres +1 · fixed in 2.11.0, 2.3.0
- CVE-2026-49987Repomix: Command Injection (RCE) via `--remote-branch` Argument Injectionnpm · repomix · fixed in 1.14.1
- CVE-2026-49988Repomix: attach_packed_output can bypass file-read secret scanning for supported local filesnpm · repomix · fixed in 1.14.1
- CVE-2026-53517Better Auth OAuth Provider: Refresh Token Rotation Race Condition Allows Concurrent Replay and Token Family Forkingnpm · @better-auth/oauth-provider, better-auth · fixed in 1.6.11, 1.6.0
- CVE-2026-45337Better Auth: Device authorization approve and deny accept any authenticated session while the user code is pendingnpm · better-auth · fixed in 1.6.11
- CVE-2026-53514Better Auth: Unauthorized invitation acceptance via unverified email match in organization pluginnpm · better-auth · fixed in 1.6.11
- CVE-2026-53515Better Auth: Privilege escalation via SSO provider registration: missing admin role check in @better-auth/ssonpm · @better-auth/sso · fixed in 1.6.11
- CVE-2026-53512Better Auth: OAuth refresh-token replay via missing client authentication on oidc-provider and mcp pluginsnpm · better-auth · fixed in 1.6.11
- CVE-2026-53518Better Auth OAuth Provider: Race Condition in Authorization Code Exchange Enables Multi-Use Code Redemptionnpm · @better-auth/oauth-provider, better-auth · fixed in 1.6.11
- CVE-2026-53513Better Auth: Server-side request forgery via unvalidated OIDC endpoints on @better-auth/sso provider registrationnpm · @better-auth/sso · fixed in 1.6.11