Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-54764ForwardAuth middleware leaks X-Forwarded-Port spoofing via untrusted X-Forwarded-Proto when trustForwardHeader=falseGo · github.com/traefik/traefik, github.com/traefik/traefik/v2 +1 · fixed in 2.11.51, 3.6.22, 3.7.6
- CVE-2026-57572Crawl4AI: Unauthenticated RCE via Chromium launch-argument injection in browser_config.extra_argsPyPI · crawl4ai · fixed in 0.9.0
- CVE-2026-57573Crawl4AI unauthenticated SSRF in Docker streaming crawl endpointPyPI · crawl4ai · fixed in 0.9.0
- CVE-2026-57571Crawl4AI arbitrary file write via download filename path traversalPyPI · crawl4ai · fixed in 0.9.0
- CVE-2026-55514vLLM denial of service via prompt embeds on M-RoPE modelsPyPI · vllm · fixed in 0.24.0
- CVE-2026-55574vLLM: ReDoS via structured_outputs.regex compiled without timeout in xgrammar and outlines backendsPyPI · vllm · fixed in 0.24.0
- CVE-2026-50135Hugo: Symlink confinement bypass in resources.GetGo · github.com/gohugoio/hugo · fixed in 0.162.0
- CVE-2026-54234vLLM: Remote DoS in vLLM via Invalid Recovered Token ReinjectionPyPI · vllm · fixed in 0.24.0
- CVE-2026-50134Hugo: security.http.urls allow-list bypass via HTTP redirectsGo · github.com/gohugoio/hugo · fixed in 0.162.0
- CVE-2026-55646vLLM speech-to-text endpoints allocate full upload before enforcing the audio file-size limitPyPI · vllm · fixed in 0.24.0
- CVE-2026-50133Hugo: XSS via text/html content filesGo · github.com/gohugoio/hugo · fixed in 0.162.0
- CVE-2026-58403Hugo symlink confinement bypass in os.ReadFileGo · github.com/gohugoio/hugo · fixed in 0.163.1
- CVE-2026-58402Hugo default code block renderer XSS via unescaped code-fence languageGo · github.com/gohugoio/hugo · fixed in 0.163.3
- CVE-2026-58404Hugo security.http.urls deny rules bypassed by alternate IPv4 encodingsGo · github.com/gohugoio/hugo · fixed in 0.163.1
- CVE-2026-54291Silent channel-binding authentication downgrade via unsupported certificate algorithmsMaven · org.postgresql:postgresql · fixed in 42.7.12
- CVE-2026-55379Pillow BdfFontFile`: `Image.new()` called without `_decompression_bomb_check()` — bomb protection bypass via font loadingPyPI · pillow · fixed in 12.3.0
- CVE-2026-55380Pillow GdImageFile decompression bomb protection bypassPyPI · pillow · fixed in 12.3.0
- CVE-2026-54060Pillow: `FontFile.compile()`: `Image.new()` called without `_decompression_bomb_check()`PyPI · pillow · fixed in 12.3.0
- CVE-2026-54059Pillow: PcfFontFile._load_bitmaps()`: `Image.frombytes()` called without `_decompression_bomb_check()` — bomb protection bypass via PCF font loadingPyPI · pillow · fixed in 12.3.0
- CVE-2026-55798Pillow: WindowsViewer.get_command() OS command injection via unescaped shell pathPyPI · pillow · fixed in 12.3.0
- CVE-2026-59195pnpm: Path traversal in configDependencies env lockfile allows symlink creation outside node_modules/.pnpm-confignpm · pnpm · fixed in 10.34.4, 11.8.0
- CVE-2026-59196pnpm: hoisted install imports lockfile alias outside node_modulesnpm · pnpm · fixed in 10.34.4, 11.7.0
- CVE-2026-59194pnpm: patch-remove could delete project-selected files outside the patches directorynpm · pnpm · fixed in 10.34.4, 11.7.0
- CVE-2026-59152Arbitrary server-side file read in LangSmith SDK TracingMiddlewarePyPI · langsmith · fixed in 0.8.18
- CVE-2026-58203NestedSecretsSettingsSource follows symlinks outside secrets_dir, enabling local file read and bypassing secrets_dir_max_sizePyPI · pydantic-settings · fixed in 2.14.2
- CVE-2026-54893Email-derived URL path injection in the Swoosh Microsoft Graph adapterHex · swoosh · fixed in 1.26.3
- CVE-2026-49297Apache Airflow Google provider: Path traversal via GCS object names → local/SFTP filesystem (GCSToSFTPOperator + GCSTimeSpanFileTransformOperator)PyPI · apache-airflow-providers-google · fixed in 22.2.1
- CVE-2026-44937SUSE Rancher Fleet had an Unauthenticated Webhook: Regex Injection via Unsanitized Repository URL ComponentsGo · github.com/rancher/fleet · fixed in 0.15.2, 0.14.6, 0.13.11 and more
- CVE-2026-46588Apache Camel: CouchDB: Non-Camel-prefixed Exchange headers bypass HeaderFilterStrategy allowing operation override from untrusted inputMaven · org.apache.camel:camel-couchdb · fixed in 4.14.8, 4.18.3, 4.21.0
- CVE-2026-46587Apache Camel: Couchbase: Non-Camel-prefixed Exchange headers bypass HeaderFilterStrategy allowing operation override from untrusted inputMaven · org.apache.camel:camel-couchbase · fixed in 4.14.8, 4.18.3, 4.21.0