Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-61431PraisonAI before 4.6.78 Path Traversal via ContextGathererPyPI · praisonai · fixed in 4.6.78
- CVE-2026-60091PraisonAI before 4.6.78 Unauthenticated SSRF via webhook_urlPyPI · praisonai · fixed in 4.6.78
- CVE-2026-60089PraisonAI before 1.6.78 Path Traversal via config.tomlPyPI · praisonaiagents · fixed in 1.6.78
- CVE-2026-60086PraisonAI before 4.6.78 Prompt Injection Defense BypassPyPI · praisonai · fixed in 4.6.78
- CVE-2026-58661n8n - Disk Space Exhaustion via Data-Table File Upload Endpointnpm · n8n · fixed in 2.28.0, 1.123.58
- CVE-2026-57994phpMyFAQ - Information Disclosure of Inactive FAQ Content via Public API EndpointsPackagist · phpmyfaq/phpmyfaq, thorsten/phpmyfaq · fixed in 4.1.5
- CVE-2026-57961phpMyFAQ - Authenticated Path Traversal in PDF Export via concatenatePaths FunctionPackagist · phpmyfaq/phpmyfaq, thorsten/phpmyfaq · fixed in 4.1.5
- CVE-2026-56765Vikunja - Unauthenticated Instance-Wide Data Breach via Link Share Hash Disclosure Chained with Cross-Project Attachment IDORGo · code.vikunja.io/api · fixed in 2.2.1
- CVE-2026-56373ImageMagick - Use-After-Free Write in PDB DecoderNuGet · magick.net-q16-anycpu, magick.net-q16-arm64 +17 · fixed in 14.10.3
- CVE-2026-56366ImageMagick - Memory Leak in META Reader APP1JPEG Error PathNuGet · magick.net-q16-anycpu, magick.net-q16-arm64 +16 · fixed in 14.11.1
- CVE-2026-56354n8n - Cross-Site Scripting and Open Redirect in Form Nodenpm · n8n · fixed in 2.12.0, 2.10.4, 1.123.24
- CVE-2026-56261Crawl4AI - Server-Side Request Forgery via Webhook URLsPyPI · crawl4ai · fixed in 0.8.7
- CVE-2026-56813Cookie attribute injection in Plug.Conn.Cookies.encode/2Hex · plug · fixed in 1.16.6, 1.17.4, 1.18.5 and more
- CVE-2026-56814Plug: multipart :length limit is not charged for part headers, enabling unbounded temp-file creation (denial of service)Hex · plug · fixed in 1.16.6, 1.17.4, 1.18.5 and more
- CVE-2026-39244adm-zip before 0.5.18 is vulnerable to denial of service via a crafted ZIP file with a manipulated uncompressed size header field.npm · adm-zip · fixed in 0.6.0
- CVE-2026-54771Langroid: handle_message() executes user-supplied tool JSON without sender verificationPyPI · langroid · fixed in 0.65.3
- CVE-2026-54769Langroid: Sandbox Escape to Remote Code Execution via Incomplete `eval()` Mitigation in TableChatAgentPyPI · langroid · fixed in 0.65.2
- CVE-2026-54760Langroid: SQLChatAgent dangerous-function blocklist can be bypassed with quoted or schema-qualified pg_read_file callsPyPI · langroid · fixed in 0.65.1
- CVE-2026-50181Langroid: Path traversal in the file tools allows read/write outside configured current directoryPyPI · langroid · fixed in 0.64.0
- CVE-2026-50180Langroid: SQLChatAgent _validate_query blocklist misses pg_read_file family enabling arbitrary file readPyPI · langroid · fixed in 0.64.0
- CVE-2026-55615Langroid: Neo4jChatAgent executes LLM-generated Cypher without validation (prompt-to-Cypher injection; config-conditional RCE), mirroring the SQLChatAgent bug fixed in CVE-2026-25879PyPI · langroid · fixed in 0.65.5
- CVE-2026-44342New API CSRF in email and WeChat account binding endpointsGo · github.com/quantumnous/new-api · fixed in 0.12.0-alpha.1
- CVE-2026-33655New API: SSRF Protection Bypass via Unresolved Hostname in Notification URLsGo · github.com/quantumnous/new-api · fixed in 0.12.0-alpha.1
- CVE-2026-59832SiYuan: Authenticated path traversal in /snippets/ static handler (serveSnippets) leaks conf/conf.json secrets and siyuan.dbGo · github.com/siyuan-note/siyuan/kernel · fixed in 0.0.0-20260704035520-68cc0f537dfa
- CVE-2026-59834SiYuan: SQL Query in Block Search Exposes Hidden Published Document ContentGo · github.com/siyuan-note/siyuan/kernel · fixed in 0.0.0-20260704035518-d0f0fe146fb0
- CVE-2026-55604@arikusi/deepseek-mcp-server has an Authorization Bypass Through User-Controlled Keynpm · @arikusi/deepseek-mcp-server · fixed in 1.7.0
- CVE-2026-55605@arikusi/deepseek-mcp-server Missing Authentication on Self-Hosted HTTP MCP Endpointnpm · @arikusi/deepseek-mcp-server · fixed in 1.8.0
- CVE-2026-55689OpenFGA: OIDC audience validation skipped when --authn-oidc-audience is unsetGo · github.com/openfga/openfga · fixed in 1.18.0
- CVE-2026-55170OpenFGA MySQL backend: case-insensitive collation on identifier columns causes incorrect authorization decisionsGo · github.com/openfga/openfga · fixed in 1.18.0
- CVE-2026-55207Pimcore: Account Takeover via Password Reset URL Injection allows unauthenticated attacker to hijack any admin account with 2FA bypassPackagist · pimcore/studio-backend-bundle · fixed in 2025.4.6, 2026.1.6