Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-55208Pimcore: SQL Injection via Column Name in DateFilter allows authenticated user to extract arbitrary database data including admin password hashesPackagist · pimcore/studio-backend-bundle · fixed in 2025.4.6, 2026.1.6
- CVE-2026-55212Pimcore: Insufficient Permission Check on Class Definition Creation Endpoint Allows Privilege EscalationPackagist · pimcore/studio-backend-bundle · fixed in 2026.1.6
- CVE-2026-55865Python Liquid: Infinite loop when parsing malformed `{% case %}` tagsPyPI · python-liquid · fixed in 2.2.1
- CVE-2026-55590CakePHP: Open redirect weakness via backslash bypassPackagist · cakephp/authentication · fixed in 3.3.6, 4.1.1, 2.11.1
- CVE-2026-54695Pipecat: Telephony WebSocket `/ws` Unauthenticated Call-Control Abuse via Attacker-Supplied Call SIDPyPI · pipecat-ai · fixed in 1.4.0
- CVE-2026-49276Kirby: Self cross-site scripting (self-XSS) in the writer fieldPackagist · getkirby/cms · fixed in 4.9.4, 5.4.4
- CVE-2026-54005Kirby: `pages.access` permission is not checked in the `site/find` REST API routePackagist · getkirby/cms · fixed in 4.9.4, 5.4.4
- CVE-2026-50188Kirby: Request header injection in `Http\Remote`Packagist · getkirby/cms · fixed in 4.9.4, 5.4.4
- CVE-2026-54004Kirby: Access to files of top-level drafts is not protected by permissionsPackagist · getkirby/cms · fixed in 4.9.4, 5.4.4
- CVE-2026-49274Kirby: `pages.access` permission is not checked in the pages picker for parent pagesPackagist · getkirby/cms · fixed in 4.9.4, 5.4.4
- CVE-2026-54003Kirby: External Initialization of the Panel on reverse proxy setups with the `Forwarded` headerPackagist · getkirby/cms · fixed in 4.9.4, 5.4.4
- CVE-2026-54002Kirby: Cross-site scripting (XSS) from incomplete HTML/XML sanitization in `Dom::sanitize()`Packagist · getkirby/cms · fixed in 4.9.4, 5.4.4
- CVE-2026-58198ChatterBot: Symlink-Following Arbitrary Write via UbuntuCorpusTrainerPyPI · chatterbot · fixed in 1.2.14
- CVE-2026-59149Mockoon: Path traversal in templated `filePath` lets a request escape the served directory (prefix-only base check)npm · @mockoon/cli, @mockoon/commons-server · fixed in 9.7.0
- CVE-2026-59148Mockoon: Unauthenticated admin API + wildcard CORS allows mock-state hijack and secret theftnpm · @mockoon/cli, @mockoon/commons-server · fixed in 9.7.0
- CVE-2026-59817Ghost: Paid gift memberships obtainable at minimal cost via the donations featurenpm · ghost · fixed in 6.44.0
- CVE-2026-59221open-webui terminal proxy path traversal guard bypass via 9x encoded traversalPyPI · open-webui · fixed in 0.10.0
- CVE-2026-59225Open WebUI: Arena task endpoints can bypass underlying model access controlsPyPI · open-webui · fixed in 0.10.0
- CVE-2026-59224Open WebUI: Terminal proxy forwards a spoofable, integrity-unbound user identity to the upstream (X-User-Id header and ws_terminal session_id query injection)PyPI · open-webui · fixed in 0.10.0
- CVE-2026-59212Open WebUI: Model meta.knowledge read-only file access can be upgraded to file write/deletePyPI · open-webui · fixed in 0.10.0
- CVE-2026-59223Open WebUI: `WEB_FETCH_FILTER_LIST` host allow/block filter bypassable via URL path and non-label-boundary matchingPyPI · open-webui · fixed in 0.10.0
- CVE-2026-59222Open WebUI: /api/v1/channels/{id}/members exposes full user model including sensitive credentialsPyPI · open-webui · fixed in 0.10.0
- CVE-2026-59215Open WebUI: Private channel messages can be disclosed through cross-channel thread parent_id bindingPyPI · open-webui · fixed in 0.10.0
- CVE-2026-59213Open WebUI: Cross-user model-list exposure via static cache key in get_all_models (aiocache key= vs key_builder= misuse)PyPI · open-webui · fixed in 0.10.0
- CVE-2026-59217Open WebUI: Upload `metadata.knowledge_id` bypasses the knowledge-base write-access check (read-only users can add files to KB)PyPI · open-webui · fixed in 0.10.0
- CVE-2026-59216Open WebUI: Cross-user code-interpreter and tool execution via unvalidated Socket.IO event-caller session_idPyPI · open-webui · fixed in 0.10.0
- CVE-2026-59219Open WebUI: Realtime endpoints accept Redis-revoked JWTs after signout/backchannel logoutPyPI · open-webui · fixed in 0.10.0
- CVE-2026-59715Open WebUI: Unauthenticated WebSocket Access to Collaborative Document Handlers (ydoc:awareness:update, ydoc:document:leave)PyPI · open-webui · fixed in 0.10.0
- CVE-2026-59220Open WebUI: ReDoS in skill-mention regexes causes whole-instance DoS on default configPyPI · open-webui · fixed in 0.10.0
- CVE-2026-59226Open WebUI: Scheduled automations continue after pending-user deactivation and stored model ACL revocationPyPI · open-webui · fixed in 0.10.0