Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-44791n8n: XML Node Prototype Pollution Patch Bypassnpm · n8n · fixed in 1.123.43, 2.22.1, 2.20.7
- CVE-2026-44790n8n: Arbitrary File Read via Git Nodenpm · n8n · fixed in 1.123.43, 2.22.1, 2.20.7
- CVE-2026-44789n8n: HTTP Request Node Pagination Prototype Pollution to RCEnpm · n8n · fixed in 1.123.43, 2.22.1, 2.20.7
- CVE-2026-45732n8n: Cross-user Authorization Bypass in Dynamic Credential OAuth Endpointsnpm · n8n · fixed in 1.123.43, 2.21.1, 2.20.7
- CVE-2026-49444n8n: Python sandbox escapenpm · n8n · fixed in 1.123.48, 2.22.4, 2.21.8
- CVE-2026-49465n8n: Git Node Clone and Push Operations Bypass File Sandboxnpm · n8n · fixed in 1.123.48, 2.22.4, 2.21.8
- CVE-2026-54304n8n: SecurityScorecard Node Leaks API Token to User-Controlled Hostnpm · n8n · fixed in 1.123.55, 2.26.1, 2.25.7
- CVE-2026-54307n8n: Credential Exfiltration via Permission Bypassnpm · n8n · fixed in 1.123.55, 2.26.2, 2.25.7
- CVE-2026-54302n8n: Stored XSS in Chat Trigger Nodenpm · n8n · fixed in 1.123.55, 2.26.2, 2.25.7
- CVE-2026-54305n8n: Cross-Tenant Credential Takeover via Dynamic Credentials EE Endpointsnpm · n8n · fixed in 1.123.55, 2.26.2, 2.25.7
- CVE-2026-54301n8n: Same-Origin XSS in Respond to Webhook Nodenpm · n8n · fixed in 1.123.55, 2.26.2, 2.25.7
- CVE-2026-54306n8n: Prototype Pollution enables confused-deputy execution via public webhooksnpm · n8n · fixed in 2.26.2, 2.25.7
- CVE-2026-54308n8n: Missing Token Validation on Microsoft Agent 365 Trigger Nodenpm · n8n · fixed in 2.26.2, 2.25.7
- CVE-2026-54311n8n: Merge Node SQL Mode Prototype Pollutionnpm · n8n · fixed in 2.26.2, 2.25.7
- CVE-2026-54310n8n: SQL Injection in Postgres v1/TimesclaeDB Nodesnpm · n8n · fixed in 2.26.2, 2.25.7
- CVE-2026-56696OpenHarness - Prompt Injection via /issue and /pr_comments Slash CommandsPyPI · openharness-ai
- CVE-2026-54309n8n: n8n MCP Browser HTTP Transport Exposes Unauthenticated Browser-Control Sessionsnpm · n8n · fixed in 2.26.2, 2.25.7
- CVE-2026-56695OpenHarness - Cross-Session Disclosure via /resume and /summary CommandsPyPI · openharness-ai
- CVE-2026-54314n8n: Denial of Service via ZIP decompression in webhook workflownpm · n8n · fixed in 2.24.0
- CVE-2026-54312n8n: Microsoft SQL Node Prototype Pollutionnpm · n8n · fixed in 2.24.0
- CVE-2026-54303n8n: Reflected XSS via Facebook, WhatsApp, and Microsoft Teams Trigger Webhook Verification Endpointsnpm · n8n · fixed in 2.24.0
- CVE-2026-54313n8n: NoSQL Injection in MongoDB Node Find And Replace Operationnpm · n8n · fixed in 2.24.0
- CVE-2026-55766guzzlehttp/psr7: CRLF Injection in HTTP Start-Line SerializationPackagist · guzzlehttp/psr7 · fixed in 2.12.1
- CVE-2026-55767Guzzle: Dot-Only Cookie Domains Match All Hosts in guzzlehttp/guzzlePackagist · guzzlehttp/guzzle · fixed in 7.12.1
- CVE-2026-55568Guzzle: Silent HTTPS-Proxy Downgrade to CleartextPackagist · guzzlehttp/guzzle · fixed in 7.12.1
- CVE-2026-10609Openshift/cluster-logging-operator: cluster logging operator creates and forwards serviceaccount tokens without verifying clf creator authorizationGo · github.com/openshift/cluster-logging-operator · fixed in 0.0.0-20260804174055-1864c2a9851d
- CVE-2026-56784OpenRemote < 1.25.0 IDOR via Bulk Alarm Deletion EndpointMaven · io.openremote:openremote-manager · fixed in 1.25.0
- CVE-2026-56762Hono - Missing Cookie Name Validation in setCookie()npm · hono · fixed in 4.12.12
- CVE-2026-56701Grav - XML External Entity Injection via SVG UploadPackagist · getgrav/grav · fixed in 2.0.0-beta.2
- CVE-2026-56379ImageMagick - Command Injection via SVG DecoderNuGet · magick.net-q16-anycpu, magick.net-q16-arm64 +17 · fixed in 14.10.3