Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-56353n8n - Authentication Bypass in Chat Trigger Nodenpm · n8n · fixed in 1.123.22, 2.9.3, 2.10.1
- CVE-2026-56352n8n - Arbitrary File Read and Execution via ExecuteWorkflow localFile Parameternpm · n8n · fixed in 2.19.3
- CVE-2026-56349n8n - Guardrail Node Bypass via Crafted Inputnpm · n8n · fixed in 2.10.0
- CVE-2025-65720An issue in Open Source GPT Researcher v3.3.7 allows attackers to execute arbitrary commands on a victim system via user interaction with a PyPI · gpt-researcher
- CVE-2026-59733rclone `serve restic --private-repos` authorization bypass: `..` in the URL path lets an authenticated user read, overwrite and delete other users' repositoriesGo · github.com/rclone/rclone · fixed in 1.74.4
- CVE-2026-54572rclone: Unvalidated symlink target in local `--links` — arbitrary file write from an untrusted remoteGo · github.com/rclone/rclone · fixed in 1.74.4
- CVE-2026-59732rclone archive extract allows S3 destination prefix escape via crafted archive pathsGo · github.com/rclone/rclone · fixed in 1.74.4
- CVE-2026-45363`jwt` (Ruby gem) - empty-key HMAC bypassRubyGems · jwt · fixed in 3.2.0, 2.10.3
- CVE-2026-48807Twig: Sandbox `__toString()` policy bypass via `Traversable` in `join` and `replace` filtersPackagist · twig/twig · fixed in 3.27.0
- CVE-2026-48806Twig: Sandbox `__toString()` policy bypass via dynamic mapping keysPackagist · twig/twig · fixed in 3.27.0
- CVE-2026-48808Twig: Sandbox property allowlist bypass via the `column` filter under `SourcePolicyInterface`Packagist · twig/twig · fixed in 3.27.0
- CVE-2026-48805Twig: Sandbox state regression in deprecated internal wrappers in `src/Resources/core.php`Packagist · twig/twig · fixed in 3.27.0
- CVE-2026-49981Twig: Sandbox filter, tag and function allow-list bypass when sandbox state changes between renders for a cached `Template`Packagist · twig/twig · fixed in 3.27.0
- CVE-2026-46637Twig: HTML-output filters in twig/* extras incorrectly declared `is_safe => ['all']`Packagist · twig/cssinliner-extra, twig/markdown-extra · fixed in 3.26.0
- CVE-2026-46638Twig: `{% sandbox %}{% include %}` skips checkSecurity() on cached templates (incomplete fix for CVE-2024-45411)Packagist · twig/twig · fixed in 3.26.0
- CVE-2026-46640Twig: Arbitrary PHP code execution via `_self.(<string>)` macro-reference compilationPackagist · twig/twig · fixed in 3.26.0
- CVE-2026-46629Twig: Unbounded formatter memoisation in twig/intl-extra keyed on template-controlled argumentsPackagist · twig/intl-extra · fixed in 3.26.0
- CVE-2026-47730Twig: XSS in profiler HtmlDumper via unescaped template and profile namesPackagist · twig/twig · fixed in 3.26.0
- CVE-2026-46628Twig: The `spaceless` filter implicitly marks its output as safePackagist · twig/twig · fixed in 3.26.0
- CVE-2026-46634Twig: `template_from_string()` escapes a SourcePolicy-driven sandbox via synthesized template namePackagist · twig/twig · fixed in 3.26.0
- CVE-2026-46633Twig: PHP code injection via `{% use %}` template namePackagist · twig/twig · fixed in 3.26.0
- CVE-2026-46639Twig: Sandbox property and method bypass via object-destructuring assignmentPackagist · twig/twig · fixed in 3.26.0
- CVE-2026-46635Twig: Sandbox property allowlist bypass via the `column` filter (array_column on objects)Packagist · twig/twig · fixed in 3.26.0
- CVE-2026-47732Twig Sandbox: multiple `__toString()` policy bypasses via unguarded string coercion pointsPackagist · twig/twig · fixed in 3.26.0
- CVE-2026-48125UAParser.js: Unbounded `Sec-CH-UA-Model` parsing can trigger ReDoS in `withClientHints()`npm · ua-parser-js · fixed in 2.0.10
- CVE-2026-49476Soup Sieve: Memory Exhaustion via Large Comma-Separated Selector Lists in soupsievePyPI · soupsieve · fixed in 2.8.4
- GHSA-HGJX-R89M-M7V4FacturaScripts: Path traversal in UploadedFile::move() via getClientOriginalName() — arbitrary file write outside MyFiles/ leading to RCEPackagist · facturascripts/facturascripts
- CVE-2026-49477Soup Sieve: Regular Expression Denial of Service (ReDoS) in soupsieve Selector ParserPyPI · soupsieve · fixed in 2.8.4
- CVE-2026-46644symfony/polyfill-intl-idn accepts xn-- labels whose Punycode payload decodes to ASCII-only: insecure equivalencePackagist · symfony/polyfill, symfony/polyfill-intl-idn · fixed in 1.38.1
- CVE-2026-49855tornado AsyncHTTPClient accumulates decompressed chunks without size limit (gzip bomb)PyPI · tornado · fixed in 6.5.6