Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-48491Traefik: SNICheck ignores wildcard TLSOptions mappings, allowing domain-fronted mTLS bypassGo · github.com/traefik/traefik/v2, github.com/traefik/traefik/v3 · fixed in 2.11.48, 3.7.3
- CVE-2026-48020Traefik StripPrefix Route-Level Auth Bypass via Path NormalizationGo · github.com/traefik/traefik, github.com/traefik/traefik/v2 +1 · fixed in 2.11.48, 3.6.19, 3.7.3
- CVE-2026-45792RTK improperly trusts project-local filter configuration, allowing silent tampering of command output shown to LLMcrates.io · rtk · fixed in 0.32.0
- CVE-2026-53753Crawl4AI: AST Sandbox Escape via gi_frame.f_back Chain - Pre-Auth RCE in Docker APIPyPI · crawl4ai · fixed in 0.8.7
- CVE-2026-53754Crawl4AI: SSRF filter bypass in Docker server via IPv6 transition forms (NAT64 / 6to4 / unspecified / v4-mapped)PyPI · crawl4ai · fixed in 0.8.8
- CVE-2026-53755Crawl4AI: SSRF via proxy settings in the Docker server bypasses the crawl-URL SSRF checkPyPI · crawl4ai · fixed in 0.8.9
- CVE-2026-54321Daytona: Public sandbox previews remain accessible for up to one hour after being made privateGo · github.com/daytonaio/daytona · fixed in 0.184.0
- CVE-2026-54319Daytona: Path traversal in sandbox volume id mounts arbitrary host paths into the sandbox — cross-tenant data access and host escapeGo · github.com/daytonaio/daytona · fixed in 0.186.0
- CVE-2026-54322Daytona: Cross-org IDOR in organization role update/delete — any org owner can rewrite or destroy another org's rolesGo · github.com/daytonaio/daytona · fixed in 0.185.0
- CVE-2026-54324Daytona: Cross-tenant data leak in notification WebSocket gateway via unverified organizationId joinGo · github.com/daytonaio/daytona · fixed in 0.185.0
- CVE-2026-45135Caddy: Unsafe Unicode Handling in FastCGI splitPos Allows Execution of Non-PHP FilesGo · github.com/caddyserver/caddy/v2 · fixed in 2.11.3
- CVE-2026-45692Caddy: Remote Admin Authorization Bypass in `/config` API via Array Index NormalizationGo · github.com/caddyserver/caddy/v2 · fixed in 2.11.3
- CVE-2026-52845Caddy: FastCGI header normalization bypass in `forward_auth copy_headers`Go · github.com/caddyserver/caddy, github.com/caddyserver/caddy/v2 · fixed in 2.11.4
- CVE-2026-52844Caddy: Windows `file_server` path authorization bypass via encoded backslashGo · github.com/caddyserver/caddy, github.com/caddyserver/caddy/v2 · fixed in 2.11.4
- CVE-2026-52846Caddy: stripHTML template function bypassGo · github.com/caddyserver/caddy, github.com/caddyserver/caddy/v2 · fixed in 2.11.4
- CVE-2026-54157LobeHub: Unauthenticated SSRF in `/webapi/proxy`npm · @lobehub/lobehub · fixed in 2.1.57
- CVE-2026-54317Home Assistant: Konnected alarm-panel switch state and zone topology disclosed to unauthenticated actors on the LANPyPI · homeassistant · fixed in 2026.6.0
- CVE-2026-55517Deno: Denial of service via non-ASCII bytes in WebSocket response headerscrates.io · deno · fixed in 2.7.5
- CVE-2026-44726Deno: TLS retry copies stale upgrade hook, risking plaintext trafficcrates.io · deno · fixed in 2.7.8
- CVE-2026-49401Deno Permission Bypass via Unicode Normalization Mismatch on macOS (APFS)crates.io · deno · fixed in 2.7.14
- CVE-2026-49402Deno: Command Injection via spawnSync & spawn on Windowscrates.io · deno · fixed in 2.7.10
- CVE-2026-49406Deno: BYONM module resolution allows `package.json` main path traversal to bypass `--allow-read` restrictionscrates.io · deno · fixed in 2.7.12
- CVE-2026-49411Deno Node TCPWrap numeric hostname aliases bypass --deny-net resolved-IP deny checkscrates.io · deno · fixed in 2.8.0
- CVE-2026-49983Deno: process.loadEnvFile() bypasses env permission checks and mutates process.env with only read accesscrates.io · deno · fixed in 2.8.1
- CVE-2026-49860Deno: WebSocket API sandbox bypass via missing post-DNS checkcrates.io · deno · fixed in 2.8.1
- CVE-2026-49859Deno: `fetch()` API sandbox bypass via missing DNS resolution checkcrates.io · deno · fixed in 2.8.1
- CVE-2026-49440Deno: Miller-Rabin Primality Test Allows Zero Roundscrates.io · deno · fixed in 2.8.1
- CVE-2026-54257Electron: Buffer performs incorrect byte length calculations resulting in heap buffer under/overflownpm · electron · fixed in 42.3.3
- CVE-2026-54316Claude Code: Out-of-Band Data Exfiltration via Pre-Approved HuggingFace Domain in WebFetchnpm · @anthropic-ai/claude-code · fixed in 2.1.163
- CVE-2026-50221In OpenStack Swift before 2.37.2, proxy-server does not strip internal update headers (X-Container-Host, X-Container-Device, X-Delete-At-HosPyPI · swift · fixed in 2.37.2