Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-59227Open WebUI: POST /api/v1/images/edit bypasses the global image-edit switch and the per-user image-generation permissionPyPI · open-webui · fixed in 0.10.0
- CVE-2026-59218Open WebUI: Account enumeration via observable login timing discrepancyPyPI · open-webui · fixed in 0.10.0
- CVE-2026-59214Open WebUI: Stored web worker XSS via PyodidePyPI · open-webui · fixed in 0.10.0
- CVE-2026-59209n8n: Shared Credential Header Leak via HTTP Request Pagination Expressionnpm · n8n · fixed in 1.123.61, 2.28.1, 2.27.4
- CVE-2026-59206n8n: Prototype Pollution via Workflow Credentials Leads to Unauthenticated User and Project Enumerationnpm · n8n · fixed in 1.123.61, 2.28.1, 2.27.4
- CVE-2026-59208n8n: Cross-Issuer Token Exchange Account Binding via Subject-Only Identity Resolutionnpm · n8n · fixed in 2.28.1, 2.27.4
- CVE-2026-59207n8n: "Allowed HTTP Request Domains" Restriction Bypass via AI Agents MCP Connectornpm · n8n · fixed in 2.28.1, 2.27.4
- CVE-2026-12590body-parser vulnerable to denial of service when invalid limit value silently disables size enforcementnpm · body-parser · fixed in 1.20.6, 2.3.0
- CVE-2026-39243decompress before 4.2.2 allows arbitrary hardlink creation during archive extraction, enabling file read disclosure and file corruption.npm · decompress
- CVE-2026-59723Cline: Cross-Origin WebSocket Hijacking in Cline Hub Dashboard (`/browser` endpoint)npm · cline · fixed in 3.0.30
- CVE-2026-54499Stanza: Remote Code Execution via Unsafe Pickle Deserialization in Model LoadersPyPI · stanza · fixed in 1.12.2
- CVE-2026-54782CoreWCF: Authentication bypass in CoreWCF SAML 1.1 / 2.0 token signature validationNuGet · corewcf.primitives · fixed in 1.8.1, 1.9.1
- CVE-2026-54781CoreWCF: SAML SubjectConfirmation methods and holder-of-key proof keys are not enforcedNuGet · corewcf.primitives · fixed in 1.8.1, 1.9.1
- CVE-2026-54784CoreWCF: SPNEGO SecurityContextToken proof key wrapped without confidentialityNuGet · corewcf.primitives · fixed in 1.9.1
- CVE-2026-54774CoreWCF: SamlSerializer skips SignatureValue verification when SAML signing token is not an X.509 certificateNuGet · corewcf.primitives · fixed in 1.8.1, 1.9.1
- CVE-2026-54783CoreWCF: XML Signature Wrapping in WS-Security endorsing/supporting signature verification allows replay of captured signed messagesNuGet · corewcf.primitives · fixed in 1.8.1, 1.9.1
- CVE-2026-54780CoreWCF: WS-Security Reference DigestMethod Algorithm-Suite BypassNuGet · corewcf.primitives · fixed in 1.8.1, 1.9.1
- CVE-2026-54775CoreWCF: Kafka consume pump halts permanently on a Kafka tombstone (null-value record), causing persistent endpoint denial of service.NuGet · corewcf.kafka · fixed in 1.8.1, 1.9.1
- CVE-2026-54778CoreWCF: UnixDomainSocket Non-Reentrant POSIX Identity ResolutionNuGet · corewcf.unixdomainsocket · fixed in 1.8.1, 1.9.1
- CVE-2026-54773CoreWCF: WS-Security signature substitution via document-wide Signature lookupNuGet · corewcf.primitives · fixed in 1.8.1, 1.9.1
- CVE-2026-54779CoreWCF: SAML token replay protection is inoperativeNuGet · corewcf.primitives · fixed in 1.8.1, 1.9.1
- CVE-2026-54772CoreWCF: Pre-authentication infinite-loop CPU exhaustion in CoreWCF net.tcp / net.pipe / net.uds framing handshakeNuGet · corewcf.netframingbase · fixed in 1.8.1, 1.9.1
- CVE-2026-54776CoreWCF: Unix Domain Socket PosixIdentity transport accepts connections that skip the security upgradeNuGet · corewcf.unixdomainsocket · fixed in 1.8.1, 1.9.1
- CVE-2026-54777CoreWCF NetNamedPipe transport accepts attach to a pre-existing named pipe instanceNuGet · corewcf.netnamedpipe · fixed in 1.8.1, 1.9.1
- CVE-2026-55877Symfony UX: XSS in symfony/ux-icons via unsanitized SVG content in local files and Iconify on-demand responsesPackagist · symfony/ux-icons · fixed in 2.36.1, 3.2.0
- CVE-2026-55878Symfony: Path Traversal in symfony/ux-toolkit Allows Arbitrary File Write and Read via Crafted Recipe ManifestPackagist · symfony/ux-toolkit · fixed in 2.36.1, 3.2.0
- CVE-2026-55471HAPI FHIR: XXE in XsltUtilities.saxonTransform via unhardened Saxon TransformerFactoryMaven · ca.uhn.hapi.fhir:org.hl7.fhir.utilities · fixed in 6.9.10
- CVE-2026-55470HAPI FHIR: DSTU2 FHIRPathEngine.matches() missing RegexTimeout protection allows ReDoSMaven · ca.uhn.hapi.fhir:org.hl7.fhir.convertors, ca.uhn.hapi.fhir:org.hl7.fhir.dstu2 +2 · fixed in 6.9.10
- CVE-2026-44161Fluentd: Server-Side Request Forgery (SSRF) via Placeholder Expansion in `out_http`RubyGems · fluentd · fixed in 1.19.3
- CVE-2026-44160Fluentd: Denial of Service (DoS) via Gzip Decompression Bomb in `in_http` and `in_forward`RubyGems · fluentd · fixed in 1.19.3