Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-56668ZITADEL: Unauthorized Token Privilege Escalation in OAuth2 Token ExchangeGo · github.com/zitadel/zitadel · fixed in 4.15.3
- CVE-2026-56666ZITADEL: Auto-linking by email: IdP-side email verification is not checkedGo · github.com/zitadel/zitadel · fixed in 4.15.3
- CVE-2026-56665ZITADEL: Missing Token Expiration (`exp`) Validation in JWT IdP ProviderGo · github.com/zitadel/zitadel · fixed in 4.15.2, 3.4.12
- CVE-2026-56664ZITADEL: Missing Token Lifecyle Validation (`exp` and `iat`) in JWT IdP ProviderGo · github.com/zitadel/zitadel · fixed in 1.80.0-v2.20.0.20260615122908-fad02c6d9f45
- CVE-2026-55672ZITADEL: Missing client_id binding in OIDC authorization code exchange and refresh token flows (RFC 6749 Section 4.1.3 violation)Go · github.com/zitadel/zitadel · fixed in 1.80.0-v2.20.0.20260616131956-0973b074b488
- CVE-2026-55671ZITADEL: Server-Side Request Forgery (SSRF) and Denylist Bypass in Outgoing HTTP ComponentsGo · github.com/zitadel/zitadel · fixed in 1.80.0-v2.20.0.20260615133614-8e82ec1cb9a2
- CVE-2026-55670ZITADEL: Cross-Tenant User Leakage via Recycled IdentifiersGo · github.com/zitadel/zitadel · fixed in 1.80.0-v2.20.0.20260615092437-6082e59d47c1
- CVE-2026-55669ZITADEL: Missing Token Audience Validation (`aud`) in JWT IdP ProviderGo · github.com/zitadel/zitadel · fixed in 1.80.0-v2.20.0.20260615132747-d184e976fc79
- CVE-2026-59193Grav CMS — Improper Handling of Highly Compressed Data in Installer::unZip()Packagist · getgrav/grav · fixed in 2.0.0
- CVE-2026-55890Grav: Stored CSS injection via Markdown image ?style=… reaches MediaObjectTrait::style()Packagist · getgrav/grav · fixed in 2.0.0-rc.9
- CVE-2026-55885Grav: Admin Backup Zip File Exposes Account Credentials and Configuration SecretsPackagist · getgrav/grav · fixed in 1.7.53
- CVE-2026-53653Grav: Unauthenticated denial of service via unbounded image derivative dimensionsPackagist · getgrav/grav · fixed in 2.0.0-rc.8, 1.7.53
- CVE-2026-59180Apprise forwards configured auth headers across cross-origin HTTP redirectsPyPI · apprise · fixed in 1.11.0
- CVE-2026-54063Excelize: Unbounded Row Index Allocation in Worksheet Parser (checkSheet OOM/Panic DoS)Go · github.com/xuri/excelize/v2 · fixed in 2.11.0
- CVE-2026-59162Excelize: Negative shared-string index causes panic in GetCellValue and GetRowsGo · github.com/xuri/excelize, github.com/xuri/excelize/v2 · fixed in 2.11.0
- CVE-2026-59161Excelize: Streaming GetRows row-bound bypass causes attacker-controlled allocationGo · github.com/xuri/excelize, github.com/xuri/excelize/v2 · fixed in 2.11.0
- CVE-2026-53657Lima: An arbitrary user in a QEMU VM could gain the root privilege in the VM via the guest agent socketGo · github.com/lima-vm/lima, github.com/lima-vm/lima/v2 · fixed in 2.1.3
- CVE-2026-566759router: Reverse proxy locality collapse allows unauthenticated access to 9router /v1 APIsnpm · 9router · fixed in 0.5.2
- CVE-2026-556389router: Unauthenticated LLM proxy access via /codex rewrite authorization bypassnpm · 9router · fixed in 0.5.2
- CVE-2026-556419router: Unauthenticated `/v1` proxy access via `Host`-header spoofing → open AI relay + SSRFnpm · 9router · fixed in 0.5.2
- CVE-2026-566769router: Image prefetch DNS rebinding allows SSRF to internal servicesnpm · 9router · fixed in 0.5.2
- CVE-2026-555009router: Exposure of Sensitive Information and Unprotected Database Import/Export Allows Complete Credential Theft and Database Takeovernpm · 9router
- CVE-2026-555019router: Login brute-force protection bypass via spoofed X-Forwarded-For headernpm · 9router · fixed in 0.4.77
- CVE-2026-61455Grav before 2.0.1 Decompression Bomb via ZipArchiverPackagist · getgrav/grav · fixed in 2.0.1
- CVE-2026-61450Grav before 2.0.2 Config Exfiltration via offsetGet FilterPackagist · getgrav/grav · fixed in 2.0.2
- CVE-2026-61444PraisonAI before 4.6.78 Code Injection via f-stringPyPI · praisonai · fixed in 4.6.78
- CVE-2026-61441PraisonAI Platform before 0.1.9 Authorization Bypass via DependenciesPyPI · praisonai-platform · fixed in 0.1.9
- CVE-2026-61437PraisonAI before 1.6.78 Remote Code Execution via tools.pyPyPI · praisonaiagents · fixed in 1.6.78
- CVE-2026-61434PraisonAI before 4.6.78 Allowlist Bypass via find -execPyPI · praisonai · fixed in 4.6.78
- CVE-2026-61432PraisonAI FastContext before 1.6.78 Path TraversalPyPI · praisonaiagents · fixed in 1.6.78