Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-46354Coder: PKCS#7 signature bypass in Azure instance identity allows unauthenticated agent token theftGo · github.com/coder/coder, github.com/coder/coder/v2 · fixed in 2.24.5, 2.29.13, 2.30.8 and more
- CVE-2026-45796Coder vulnerable to unauthenticated SSRF via Azure Instance Identity EndpointGo · github.com/coder/coder, github.com/coder/coder/v2 · fixed in 2.33.3, 2.32.2, 2.31.12 and more
- CVE-2026-49229Actual: Disabled OpenID users keep access through existing session tokensnpm · @actual-app/sync-server · fixed in 26.6.0
- CVE-2026-50179Actual: CSV Formula Injection in Transaction Export via Imported Payee/Notes Fieldsnpm · @actual-app/web · fixed in 26.6.0
- CVE-2026-46700Actual: Missing authorization on GET /secret/:name allows non-admin OpenID users to enumerate admin-configured bank-sync secretsnpm · @actual-app/sync-server · fixed in 26.6.0
- CVE-2026-46672Actual: CSV Formula Injection in `@actual-app/cli` `--format csv` Output via Custom `escapeCsv` Helpernpm · @actual-app/cli · fixed in 26.6.0
- CVE-2026-49471Serena: Unauthenticated Flask dashboard on fixed port enables DNS rebinding → memory poisoning → RCEPyPI · serena-agent · fixed in 1.5.2
- CVE-2026-53935CiliumLocalRedirectPolicy addressMatcher allows cross-namespace service traffic hijacking and can break service translationGo · github.com/cilium/cilium · fixed in 1.19.4, 1.18.10, 1.17.16
- CVE-2026-59707LocalAI - Server-Side Request Forgery via POST /models/applyGo · github.com/mudler/localai · fixed in 1.40.1-0.20260703213242-2cbb3c96b34d
- CVE-2026-58473Cognee < 1.2.0 Unauthorized LLM Configuration Overwrite via /api/v1/settingsPyPI · cognee · fixed in 1.5.0
- CVE-2026-44454Coder vulnerable to workspace auto-creation via crafted URL parameters without user consentGo · github.com/coder/coder, github.com/coder/coder/v2 · fixed in 2.29.7, 2.30.2
- CVE-2026-55434Coder vulnerable to denial of service via unbounded request body in AI Bridge provider endpointsGo · github.com/coder/coder, github.com/coder/coder/v2 · fixed in 2.33.8, 2.34.2
- CVE-2026-598009Router < 0.4.44 - OS Command Injection via sudoPassword Parameter in Tailscale Install Endpointnpm · 9router · fixed in 0.4.44
- CVE-2026-55435Suspended Coder users retain access to AI Bridge LLM proxy endpointsGo · github.com/coder/coder, github.com/coder/coder/v2 · fixed in 2.32.7, 2.33.8, 2.34.2
- CVE-2026-56812Phoenix JavaScript presence client crashes on presence keys colliding with Object.prototype members in Presence.syncState/syncDiffnpm · phoenix · fixed in 1.5.15, 1.6.17, 1.7.24 and more
- CVE-2026-56811Phoenix transports do not limit channel joins per connection, enabling process-exhaustion denial of serviceHex · phoenix · fixed in 1.5.15, 1.6.17, 1.7.24 and more
- CVE-2026-53878Header injection possibility since DomainNameValidator accepted newlines in inputPyPI · django · fixed in 5.2.16, 6.0.7
- CVE-2026-53877Heap buffer over-read in GDALRasterPyPI · django · fixed in 5.2.16, 6.0.7
- CVE-2026-48588Potential exposure of private data via cached Set-Cookie responsePyPI · django · fixed in 5.2.16, 6.0.7
- CVE-2026-44938Fleet has PSS Bypass through addLabelsFromOptions in Fleet AgentGo · github.com/rancher/fleet · fixed in 0.12.15, 0.13.11, 0.14.6 and more
- CVE-2026-33264Apache Airflow: DAG author RCE on webserver via unrestricted import_string() in BaseSerialization.deserialize()PyPI · apache-airflow, apache-airflow-core · fixed in 3.0.0, 3.3.0
- CVE-2026-49487Apache Airflow: Task-instance API exposes secrets in deferred trigger kwargsPyPI · apache-airflow, apache-airflow-core · fixed in 3.0.0, 3.3.0
- CVE-2026-48828Apache Airflow: Bulk JSON Variables bypass should_hide_value_for_key - redact() called without the keyPyPI · apache-airflow, apache-airflow-core · fixed in 3.0.0, 3.3.0
- CVE-2026-49296Apache Airflow: Per-DAG read bypass discloses co-located DAGs' source via GET /api/v2/dagSources/{dag_id}PyPI · apache-airflow, apache-airflow-core · fixed in 3.3.0
- CVE-2026-48891Apache Airflow: /ui/dependencies scheduling graph leaks unreadable Dag identifiers via trigger/sensor dep.source/dep.targetPyPI · apache-airflow, apache-airflow-core · fixed in 3.0.0, 3.3.0
- CVE-2026-48892Apache Airflow: Config API leaks per-key secrets backend kwargs - masker bypass on synthetic optionsPyPI · apache-airflow, apache-airflow-core · fixed in 3.0.0, 3.3.0
- CVE-2026-59710showdown - Stored XSS via Unescaped Table Header ID Attribute Injectionnpm · showdown
- CVE-2026-59711showdown - Cross-Site Scripting via Unescaped Metadata Title in completeHTMLDocumentnpm · showdown
- CVE-2026-54763Traefik: headerField underscore-variant identity spoofing in BasicAuth / DigestAuth / ForwardAuthGo · github.com/traefik/traefik, github.com/traefik/traefik/v2 +1 · fixed in 2.11.51, 3.6.22, 3.7.6
- CVE-2026-54765Traefik: Gateway HTTPRoute backendRef filters can leak backend context across routes sharing a Service:portGo · github.com/traefik/traefik, github.com/traefik/traefik/v2 +1 · fixed in 3.7.6