Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-54557mise HTTP backend uses raw version path for install symlink destinationcrates.io · mise · fixed in 2026.6.1
- CVE-2026-55448mise: Local credential_command executes untrusted configcrates.io · mise · fixed in 2026.6.4
- CVE-2026-56876extract-zip unvalidated symlink path traversalnpm · extract-zip
- CVE-2026-48529GitHub MCP Server: Lockdown mode singleton in HTTP server causes cross-user GraphQL client confusionGo · github.com/github/github-mcp-server · fixed in 1.1.2
- CVE-2026-55686Podman: WORKDIR symlink traversal vulnerabilityGo · github.com/containers/podman, github.com/containers/podman/v2 +3 · fixed in 5.7.1
- CVE-2026-57231Podman: Malformed Image can trick podman run into leaking host environment variables into the containerGo · github.com/containers/libpod, github.com/containers/podman +5 · fixed in 5.8.4, 6.0.0
- CVE-2026-28385SSRF via image import from URL allows internal network probing by authenticated usersGo · github.com/canonical/lxd · fixed in 0.0.0-20261005133302-c4a919f3f4e2
- CVE-2026-55677Echo: Encoded slash (%2F) bypasses route-level protection and exposes static filesGo · github.com/labstack/echo, github.com/labstack/echo/v4 +1 · fixed in 4.15.3, 5.2.0
- CVE-2026-11779PayloadCMS 3.84.1 - Authenticated account lockout bypass through default unlock accessnpm · payload
- CVE-2026-47214Docling: Unsafe URI and Path Handling in HTML BackendPyPI · docling · fixed in 2.94.0
- CVE-2026-44018Docling: Unsafe Archive Extraction and XML Parsing in METS-GBS BackendPyPI · docling · fixed in 2.91.0
- CVE-2026-9639Authenticated Denial of Service via Malicious Backup Tarball in LXDGo · github.com/canonical/lxd · fixed in 0.0.0-20260622081844-85f897013ccd
- CVE-2026-12411Broken Access Control in Canonical LXD DevLXD APIGo · github.com/canonical/lxd · fixed in 0.0.0-20260626085133-7cb96ac80a6d
- CVE-2026-13426Client4 fails to validate path parametersGo · github.com/mattermost/mattermost/server/public · fixed in 0.1.22
- CVE-2026-53914In JetBrains Kotlin before 2.4.20 code execution was possible via unsafe deserialization in the build cache metadataMaven · org.jetbrains.kotlin:kotlin-gradle-plugin · fixed in 2.4.20-Beta1
- CVE-2025-64152Apache IoTDB: Path Traversal VulnerabilityMaven · org.apache.iotdb:iotdb-server · fixed in 1.3.6, 2.0.7
- CVE-2025-55017Apache IoTDB: Path Traversal VulnerabilityMaven · org.apache.iotdb:iotdb-server · fixed in 2.0.6, 1.3.6
- CVE-2026-57914Apache Kerby: StackOverflow on parsing deeply nested ASN1 structuresMaven · org.apache.kerby:kerby-asn1 · fixed in 2.1.2
- CVE-2026-6658Cross-site Scripting (XSS) in jupyter/nbconvertPyPI · nbconvert
- CVE-2026-49486Apache Airflow FTP provider: FTP Provider does not protect FTPS data channel (missing PROT_P)PyPI · apache-airflow-providers-ftp · fixed in 3.15.1
- CVE-2026-13322Kubevirt: virt-handler-rhel9: kubevirt: unbounded virtio-serial readline in virt-handler causes oom denial of serviceGo · github.com/kubevirt/kubevirt, kubevirt.io/kubevirt
- CVE-2026-13318Virt-api-rhel9: kubevirt: kubevirt: ssrf in virt-api port-forward via unvalidated guest-agent-reported ipGo · kubevirt.io/kubevirt · fixed in 1.10.0-rc.0
- CVE-2026-13218Kubevirt: kubevirt: symlink following in writetocachedfile allows host file overwrite from virt-launcherGo · kubevirt.io/kubevirt
- CVE-2026-12993Apicurio/apicurio-registry: apicurio-registry: xml entity-expansion denial of service via internal dtd subsetMaven · io.apicurio:apicurio-registry-schema-util-xml · fixed in 3.3.1, 3.2.6
- CVE-2025-71340picklescan - Remote Code Execution via idlelib.pyshell.ModifiedInterpreter.runcodePyPI · picklescan · fixed in 0.0.30
- CVE-2025-71338Flowise through 2.2.7 - Arbitrary File Write to Remote Code Execution via document-store APInpm · flowise
- CVE-2025-71336Flowise - Unsandboxed Remote Code Execution via Custom MCPnpm · flowise · fixed in 3.0.6
- CVE-2025-71335Flowise - Session Invalidation Failure After Password Changenpm · flowise · fixed in 3.0.10
- CVE-2025-71334Flowise - Arbitrary File Access via Missing Chat Flow ID Validationnpm · flowise · fixed in 3.0.6
- CVE-2025-71333Flowise - Arbitrary File Upload via Unauthenticated /api/v1/attachments Endpointnpm · flowise