Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-54007Open WebUI: Cross-origin postMessage confirmation bypass via action:submitPyPI · open-webui · fixed in 0.9.6
- CVE-2026-54006Open WebUI: Calendar event re-parenting allows writing events into another user's calendarPyPI · open-webui · fixed in 0.9.6
- CVE-2026-54008Open WebUI: Redirect-Bypass SSRF in OAuth `_process_picture_url`PyPI · open-webui · fixed in 0.9.6
- CVE-2026-54009Open WebUI: Cross-user file disclosure via /api/chat/completions image_url fieldPyPI · open-webui · fixed in 0.9.6
- CVE-2026-54010Open WebUI: Forged chat-file link allows cross-user file read and deletionPyPI · open-webui · fixed in 0.9.6
- CVE-2026-54011Open WebUI: Stored XSS in Mermaid Markdown PreviewPyPI · open-webui · fixed in 0.9.6
- CVE-2026-54012Open WebUI: Forged model meta.knowledge allows cross-user file read and deletionPyPI · open-webui · fixed in 0.9.6
- CVE-2026-54013Open WebUI: Stored XSS to Account Takeover via Model Profile Images in Open WebUIPyPI · open-webui · fixed in 0.9.6
- CVE-2026-54014Open WebUI: Sibling-Prefix Path Traversal via /cache/{path} in open-webui/open-webuiPyPI · open-webui · fixed in 0.9.6
- CVE-2026-54015Open WebUI: Prompt history IDOR: unbound history_id allows cross-prompt read and deletionPyPI · open-webui · fixed in 0.9.6
- CVE-2026-54016Open WebUI: Open WebUI BOLA: `search_knowledge_files` Allows Unauthorized Knowledge Base File EnumerationPyPI · open-webui · fixed in 0.9.6
- CVE-2026-54018Open WebUI: SSRF Protection Bypass in Playwright Web Loader via HTTP RedirectsPyPI · open-webui · fixed in 0.9.6
- CVE-2026-54019Open WebUI: RAG ACL Bypass in Milvus Multitenancy ModePyPI · open-webui · fixed in 0.9.6
- CVE-2026-54021Open WebUI: Authenticated users can target arbitrary configured Ollama backends via unguarded url_idx path parameterPyPI · open-webui · fixed in 0.9.6
- CVE-2026-54022Open WebUI: Any authenticated user can read other users' private notes via Socket.IOPyPI · open-webui · fixed in 0.8.11
- CVE-2026-48520Langflow: Unauthenticated Shareable Playground arbitrary local or S3 file readPyPI · langflow · fixed in 1.10.0
- CVE-2026-33760Langflow: IDOR/BOLA in Monitor API — Missing Ownership Enforcement on 7 EndpointsPyPI · langflow · fixed in 1.9.0
- CVE-2026-42867Langflow: Path Traversal in Knowledge Bases API via Creation EndpointPyPI · langflow · fixed in 1.9.0
- CVE-2026-55255Langflow: IDOR Vulnerability in `/api/v1/responses` Endpoint Allows Authenticated Attackers to Access Another User's FlowPyPI · langflow · fixed in 1.9.1, 1.9.2
- CVE-2026-55423Langflow: Logout button does not clear sessionPyPI · langflow · fixed in 1.7.0
- CVE-2026-55446Langflow: Unauthenticated DoS through multipart form boundary file uploadPyPI · langflow · fixed in 1.0.19
- CVE-2026-48519Langflow: Unauthenticated RCE in Shareable PlaygroundsPyPI · langflow · fixed in 1.9.2
- CVE-2026-55447Langflow: BaseFileComponent-based nodes arbitrary file read with RCE exploitPyPI · langflow · fixed in 1.9.2
- CVE-2026-55450Langflow: Unauthenticated file upload leads to DoS (space exhaustion) and information leakPyPI · langflow · fixed in 1.9.1
- CVE-2026-50019yt-dlp: File Downloader cookie leak with curlPyPI · yt-dlp · fixed in 2026.6.9
- CVE-2026-50574yt-dlp: Arbitrary code execution via manifest downloads with aria2cPyPI · yt-dlp · fixed in 2026.6.9
- CVE-2026-50023yt-dlp: Dangerous file type creation via insufficient filename sanitization (Bypass of CVE-2024-38519)PyPI · yt-dlp · fixed in 2026.6.9
- CVE-2026-12958Arbitrary file write in Language Servers for AWSnpm · @aws/lsp-codewhisperer · fixed in 0.0.117
- CVE-2026-12957Arbitrary Code Execution in Language Servers for AWSnpm · @aws/lsp-codewhisperer · fixed in 0.0.113
- CVE-2026-44792n8n: Source Control Pull SQL Injectionnpm · n8n · fixed in 1.123.43, 2.21.1, 2.20.7