Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-56363ImageMagick - Division by Zero in Binomial Kernel ProcessingNuGet · magick.net-q16-anycpu, magick.net-q16-arm64 +15 · fixed in 14.12.0
- CVE-2026-56361ImageMagick - Heap Buffer Overflow via Off-by-One in Morphology ProcessingNuGet · magick.net-q16-anycpu, magick.net-q16-arm64 +16 · fixed in 14.12.0
- CVE-2026-56356n8n - Stored Cross-Site Scripting in Chat Trigger Node Custom CSS Fieldnpm · n8n · fixed in 1.123.27, 2.14.1, 2.13.3
- CVE-2026-56350n8n - SSO Enforcement Bypass via APInpm · n8n · fixed in 2.8.0
- CVE-2026-56278Flowise - Session Hijacking via Weak Default Express Session Secretnpm · flowise · fixed in 3.1.0
- CVE-2026-56277Flowise - Hardcoded CORS Wildcard in TTS Endpointnpm · flowise · fixed in 3.1.2
- CVE-2026-56264Crawl4AI - Arbitrary JavaScript Execution via /execute_js EndpointPyPI · crawl4ai · fixed in 0.8.7
- CVE-2025-71381Hono - Vary Header Injection in CORS Middlewarenpm · hono · fixed in 4.10.3
- CVE-2025-71374picklescan - Arbitrary Code Execution via Undetected profile.Profile.runPyPI · picklescan · fixed in 0.0.29
- CVE-2025-71371picklescan - Remote Code Execution via code.InteractiveInterpreter Detection BypassPyPI · picklescan · fixed in 0.0.29
- CVE-2025-71368picklescan - Arbitrary Code Execution via Undetected doctest.debug_scriptPyPI · picklescan · fixed in 0.0.30
- CVE-2025-71363picklescan - Arbitrary Code Execution via Undetected cProfile.run in Pickle DeserializationPyPI · picklescan · fixed in 0.0.30
- CVE-2025-71355Picklescan - Arbitrary Code Execution via Unsafe Numpy Function Detection BypassPyPI · picklescan · fixed in 0.0.25
- CVE-2025-71352picklescan - Remote Code Execution via Undetected trace.Trace.runctx in Pickle FilesPyPI · picklescan · fixed in 0.0.29
- CVE-2025-71350picklescan - Undetected Remote Code Execution via torch.utils.collect_env.runPyPI · picklescan · fixed in 0.0.28
- CVE-2025-71349picklescan - Arbitrary Code Execution via Undetected trace.Trace.run in Pickle FilesPyPI · picklescan · fixed in 0.0.29
- CVE-2026-54696Ruby JSON: JSON generator heap buffer overflow when streaming to an IORubyGems · json · fixed in 2.19.9
- CVE-2026-57204pypdf: Missing stream length values ignore defined limitsPyPI · pypdf · fixed in 6.13.3
- CVE-2026-57585MessagePack: Out-of-bounds read/crash on Unpacker reuse after caught errorPyPI · msgpack · fixed in 1.2.1
- CVE-2026-7873Code Injection Vulnerability in Code Validation EndpointPyPI · langflow · fixed in 1.10.1.rc0
- CVE-2026-49451Microsoft.OpenAPI: Circular schema references may terminate OpenAPI parsingNuGet · microsoft.openapi · fixed in 2.7.5, 3.5.4
- CVE-2026-58372SeaweedFS < 4.34 - Cross-Bucket Object Deletion via DeleteObjects Request-Body KeysGo · github.com/seaweedfs/seaweedfs · fixed in 0.0.0-20260526080459-dd1b4287899e
- CVE-2026-58168DeepTutor < 1.4.10 - Insecure Default Grants Unrestricted MCP Tool Access to Non-Admin UsersPyPI · deeptutor · fixed in 1.4.10
- CVE-2026-58167Nightingale < 9.0.0-beta.2 - Datasource Credential Disclosure to Low-Privilege UsersGo · github.com/ccfos/nightingale, github.com/ccfos/nightingale/v4 +2 · fixed in 6.7.3-0.20260528033214-762819fbaa23
- CVE-2025-53648Apache Gravitino: SQL misconfiguration can access or truncate filesMaven · org.apache.gravitino:catalog-jdbc-common · fixed in 1.0.0
- CVE-2026-53433Denial of Service in fzfGo · github.com/junegunn/fzf · fixed in 0.73.1
- CVE-2026-41053Over-inclusive team membership expansion in GitHub App authentication provider for RancherGo · github.com/rancher/rancher · fixed in 2.14.2, 2.13.6, 0.0.0-20260519172014-d0c047bbc6d2
- CVE-2026-49434Apache ActiveMQ Broker, Apache ActiveMQ, Apache ActiveMQ All: LdapNetworkConnector instantiates denied transports and a remote-properties…Maven · org.apache.activemq:activemq-all, org.apache.activemq:activemq-broker +1 · fixed in 5.19.8, 6.2.7
- CVE-2026-49432Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ Stomp: STOMP negative content-length enables denial of serviceMaven · org.apache.activemq:activemq-all, org.apache.activemq:activemq-stomp +1 · fixed in 5.19.8, 6.2.7
- CVE-2026-49877Apache ActiveMQ: Authenticated web users retain admin access by default in the Web ConsoleMaven · org.apache.activemq:apache-activemq · fixed in 5.19.8, 6.2.7