Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-44025Fluentd: Exposure of Sensitive Information via Monitor Agent APIRubyGems · fluentd · fixed in 1.19.3
- CVE-2026-44024Fluentd: Remote Code Execution (RCE) via Arbitrary File Write in `${tag}` PlaceholderRubyGems · fluentd · fixed in 1.19.3
- CVE-2026-55830RestrictedPython guard hooks can be shadowed via positional-only argumentsPyPI · restrictedpython · fixed in 8.3
- CVE-2026-48492Snipe-IT's selectlist visibility is too permissivePackagist · snipe/snipe-it · fixed in 8.5.1
- CVE-2026-55849@cyclonedx/cyclonedx-npm: Shell Injection via Unsanitized `--workspace` Argumentnpm · @cyclonedx/cyclonedx-npm · fixed in 5.0.0
- CVE-2026-35211OpenCTI: Elasticsearch Painless Script Injection via GraphQL `script` filter operator allows authenticated user to exfiltrate data and cause DoSPyPI · pycti · fixed in 7.260401.0
- CVE-2026-35210OpenCTI: Authorization Bypass via `synchronized-upsert` HTTP Header InjectionPyPI · pycti · fixed in 7.260326.0
- CVE-2026-54528jupyterlab-git excluded_paths Case-Sensitivity Bypass Allows Reading Excluded DirectoriesPyPI · jupyterlab-git · fixed in 0.54.0
- CVE-2026-54527JupyterLab Git: Stored XSS leading to RCEnpm · @jupyterlab/git · fixed in 0.54.0
- CVE-2026-58191Appium: Reflected XSS / arbitrary JS in @appium/base-driver /test/guinea-pig* routesnpm · @appium/base-driver · fixed in 10.7.0
- CVE-2026-57481Parse Server: LiveQuery discloses object data to a subscriber across an ACL read-access changenpm · parse-server · fixed in 9.9.1-alpha.13, 8.6.83
- CVE-2026-57480Parse Server: Denial of service via exponential-time processing of deeply nested query operatorsnpm · parse-server · fixed in 9.9.1-alpha.12, 8.6.82
- CVE-2026-55778Parse Server: Stored XSS via non-standard file extension bypassing file upload extension blocklistnpm · parse-server · fixed in 9.9.1-alpha.11, 8.6.81
- CVE-2026-49866libp2p: CPU DoS via oversized IHAVE and IWANT control message arraysnpm · @libp2p/gossipsub · fixed in 16.0.0
- CVE-2026-54590AsyncSSH AuthorizedKeysFile username substitution bypass through ~ and environment expansionPyPI · asyncssh · fixed in 2.23.1
- CVE-2026-54591AsyncSSH: SCP Path Traversal to Arbitrary File WritePyPI · asyncssh · fixed in 2.23.1
- CVE-2026-55542Snipe-IT's S3 signature image retrieval lacks authorization before temporary URLPackagist · snipe/snipe-it · fixed in 8.5.1
- CVE-2026-55206py7zr: O(n^2) algorithmic complexity DoS in PackInfo._read()PyPI · py7zr · fixed in 1.1.3
- CVE-2026-55195py7zr: Decompression bomb (zip bomb) denial of service via unchecked extraction sizePyPI · py7zr · fixed in 1.1.3
- CVE-2026-55596Plate: Media embed provider metadata can bypass URL sanitization and execute iframe JavaScriptnpm · @platejs/media · fixed in 53.1.4
- CVE-2026-56669Elysia: Inefficient Algorithmic Complexity and Interpretation Conflictnpm · elysia · fixed in 1.4.29
- GHSA-MXWC-WH95-PW4GTrapster Community: Unauthenticated malformed DNS compression pointers crash per-packet honeypot handlerPyPI · trapster · fixed in 1.2.2
- CVE-2026-58494Wasmtime: WASI hard links bypass wasmtime-wasi's FilePerms for destinationcrates.io · wasmtime-wasi · fixed in 24.0.11, 36.0.12, 45.0.3 and more
- CVE-2026-55404yt-dlp: Downstream command injection via improper sanitization of yt-dlp --write-link outputPyPI · yt-dlp · fixed in 2026.7.4
- CVE-2026-59936pypdf: Possible infinite loop for not terminated inline imagesPyPI · pypdf · fixed in 6.14.1
- CVE-2026-59935pypdf: Possible infinite loop for not terminated inline images (ASCII85 and ASCIIHex filter)PyPI · pypdf · fixed in 6.14.2
- CVE-2026-59939httplib2: Decompression Bomb Denial of Service via Unbounded gzip/deflate Response HandlingPyPI · httplib2 · fixed in 0.32.0
- CVE-2026-59947Composer: URL-embedded HTTP-Basic username leaks to verbose logs (GitHub PAT exposure)Packagist · composer/composer · fixed in 2.10.2, 2.2.29
- CVE-2026-59948Composer: Arbitrary file write outside vendor via malicious transitive package namePackagist · composer/composer · fixed in 2.10.2, 2.2.29
- CVE-2026-59819LiteLLM: Local file read via request-supplied OIDC file referencesPyPI · litellm · fixed in 1.83.10