Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-82337Apache Airflow: DeadlineAlert fields bypass plugin-registration gate for scheduler-side deserializationPyPI · apache-airflow-core · fixed in 3.4.0
- CVE-2026-86468Apache Airflow: CLI argv masking misses Variable values and --conn-extra, persisting secrets in audit logsPyPI · apache-airflow, apache-airflow-core · fixed in 3.0.0, 3.4.0
- CVE-2026-96285Apache Airflow: Scheduler: next_kwargs deserialized before the dict check, so resume data still invokes constructorsPyPI · apache-airflow-core · fixed in 3.4.0
- CVE-2026-113508Apache Airflow: Logout token revocation fails open; errors silently swallowedPyPI · apache-airflow-core · fixed in 3.4.0
- CVE-2026-101031Apache Airflow: Shell command injection in the example_dag_decorator example Dag via an IPv6 zone identifierPyPI · apache-airflow-core · fixed in 3.4.0
- CVE-2026-92683Incomplete evaluation of multi-condition JWT where filter in @authentication in @neo4j/graphqlnpm · @neo4j/graphql · fixed in 7.6.7
- CVE-2026-113504Apache Airflow: Secrets masker: pattern-based masking bounded at depth 5 returns deeply-nested registered secrets in cleartextPyPI · apache-airflow, apache-airflow-core · fixed in 3.0.0, 3.4.0
- CVE-2026-107474Apache Airflow: Connections API: apprise connection "config" extra returned in cleartextPyPI · apache-airflow, apache-airflow-core · fixed in 3.0.0, 3.4.0
- CVE-2026-111395Apache Airflow: Reserved serialization keys in Dag run conf crash the scheduler or are rebuilt as objects in the Triggerer via deadline…PyPI · apache-airflow-core · fixed in 3.4.0
- CVE-2026-111421Apache Airflow: Execution API: set_xcom skips the reserved-key check, so task-written XComs instantiate airflow. classes on the API serverPyPI · apache-airflow-core · fixed in 3.4.0
- CVE-2026-111452Apache Airflow: Secrets masker: camelCase key names (privateKey, connectionString, webhookUrl) not matched against the sensitive-field listPyPI · apache-airflow, apache-airflow-core · fixed in 3.0.0, 3.4.0
- CVE-2026-111453Apache Airflow: API: asset queuedEvents DELETE checks Dag edit on a ?dag_id query value but deletes rows for every readable DagPyPI · apache-airflow-core · fixed in 3.4.0
- CVE-2026-111454Apache Airflow: API: asset endpoints return scheduled/producing/consuming Dag IDs the caller cannot readPyPI · apache-airflow, apache-airflow-core · fixed in 3.0.0, 3.4.0
- CVE-2026-111455Apache Airflow: Connections API: async connection test authorizes create at enqueue but overwrites a later-created connection at commitPyPI · apache-airflow-core · fixed in 3.4.0
- CVE-2026-123870[Eclipse CSI - otterdog] Unauthenticated remote code execution via eval() on format-string-injected webhook body when…PyPI · otterdog · fixed in 1.3.2
- CVE-2026-123616imgproxy 3.3.0 before 4.0.16 Memory Exhaustion DoS via ICO LoaderGo · github.com/imgproxy/imgproxy, github.com/imgproxy/imgproxy/v2 +2 · fixed in 4.0.16
- CVE-2026-123615imgproxy before 4.0.17 Out-of-Bounds Write in ICO LoaderGo · github.com/imgproxy/imgproxy, github.com/imgproxy/imgproxy/v2 +2 · fixed in 4.0.17
- CVE-2026-123614imgproxy 4.0.0 before 4.0.16 Heap Buffer Overflow via ICO Loader Integer OverflowGo · github.com/imgproxy/imgproxy, github.com/imgproxy/imgproxy/v2 +2 · fixed in 4.0.16
- CVE-2026-123613Rustls 0.23.13 before 0.23.45 TLS 1.3 Handshake Encryption Level Bypasscrates.io · rustls · fixed in 0.23.45
- CVE-2026-123612rustls 0.23.44 and 0.23.45 ECH Rejection Application Data Disclosurecrates.io · rustls · fixed in 0.23.46
- CVE-2026-123611rustls before 0.23.46 Key Exchange Downgrade via Unauthenticated ServerHellocrates.io · rustls · fixed in 0.23.46
- CVE-2026-123610rustls before 0.23.46 Denial of Service via Brotli Certificate Decompressioncrates.io · rustls · fixed in 0.23.46, 0.24.0-dev.2
- CVE-2026-123609Rustls before 0.23.46 and 0.24.0-dev.1 before 0.24.0-dev.2 Secret Exposure via Debugcrates.io · rustls · fixed in 0.23.46
- CVE-2026-123608Hickory DNS hickory-proto 0.3.1 before 0.26.1 CPU Exhaustion via BinEncoder Name Compressioncrates.io · hickory-proto · fixed in 0.26.1
- CVE-2026-123607Hickory DNS NSEC3 Closest-Encloser Proof Unbounded Loop Denial of Servicecrates.io · hickory-net, hickory-proto · fixed in 0.26.1, 0.26.0-beta.1
- CVE-2026-123566Devalue before 5.9.3 CPU Amplification Denial of Service via unevalnpm · devalue · fixed in 5.9.3
- CVE-2026-123562Devalue 5.8.0 before 5.9.3 Denial of Service via stringifyAsync Unhandled Rejectionnpm · devalue · fixed in 5.9.3
- CVE-2026-103022Urwid: handle_short_request() crashes on non-ASCII POST body (UnicodeEncodeError DoS)PyPI · urwid · fixed in 4.0.7
- CVE-2026-94619FileGator: Missing authorization in POST /upload allows cross-user read and deletion of temporary filesPackagist · filegator/filegator · fixed in 7.15.0
- CVE-2026-94618FileGator: Missing authorization in GET /batchdownload allows cross-user retrieval of another user's archivePackagist · filegator/filegator · fixed in 7.15.0