Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-56394Craft CMS - Authenticated Path Traversal in assets/icon Extension ParameterPackagist · craftcms/cms · fixed in 4.17.7, 5.9.13
- CVE-2026-56393Craft CMS - Multiple Stored Cross-Site Scripting in Settings Names and Field OptionsPackagist · craftcms/cms · fixed in 5.9.0-beta.1, 4.17.0-beta.1
- CVE-2026-56385Craft CMS - Authorization Bypass in assets/preview-file EndpointPackagist · craftcms/cms · fixed in 5.9.14, 4.17.8
- CVE-2026-56384Craft CMS - Missing Authorization in assets/preview-thumb EndpointPackagist · craftcms/cms · fixed in 4.17.8, 5.9.14
- CVE-2026-56383Craft CMS - Stored XSS in Table Field via Row Heading Column TypePackagist · craftcms/cms · fixed in 4.16.19, 5.8.23
- CVE-2026-56382Craft CMS - Remote Code Execution via Missing Config Sanitization in FieldsControllerPackagist · craftcms/cms · fixed in 5.9.14
- CVE-2026-56381Craft CMS - Stored XSS via User Group Name in User Permissions PagePackagist · craftcms/cms · fixed in 5.8.22
- CVE-2026-56378ImageMagick - Heap Out-of-Bounds Read in PCD DecoderNuGet · magick.net-q16-anycpu, magick.net-q16-arm64 +17 · fixed in 14.10.3
- CVE-2026-56367ImageMagick - Heap Out-of-Bounds Read in PSB RLE DecodingNuGet · magick.net-q16-anycpu, magick.net-q16-arm64 +17 · fixed in 14.10.3
- CVE-2026-56265Crawl4AI - Authentication Bypass via Hardcoded JWT Signing KeyPyPI · crawl4ai · fixed in 0.8.7
- CVE-2026-56236Capgo CLI - Arbitrary File Overwrite via Symlink-Following in Local Credential Operationsnpm · @capgo/cli · fixed in 7.84.6
- CVE-2025-71378picklescan - Remote Code Execution via Undetected cProfile.runctx in Pickle FilesPyPI · picklescan · fixed in 0.0.30
- CVE-2025-71357picklescan - Arbitrary Code Execution via Undetected idlelib.pyshell.ModifiedInterpreter.runcommandPyPI · picklescan · fixed in 0.0.30
- CVE-2025-71351picklescan - Remote Code Execution via timeit.timeit() Detection BypassPyPI · picklescan · fixed in 0.0.25
- CVE-2025-71348picklescan - Arbitrary Code Execution via torch.utils._config_module.load_config BypassPyPI · picklescan · fixed in 0.0.28
- CVE-2026-12799BerriAI litellm Incomplete Fix CVE-2025-0628 internal_user_endpoints.py ui_view_users improper authorizationPyPI · litellm
- CVE-2026-12798BerriAI litellm MCP OpenAPI Spec Loader openapi_to_mcp_generator.py load_openapi_spec_async server-side request forgeryPyPI · litellm
- CVE-2026-12797BerriAI litellm Completions banned_keywords.py async_pre_call_hook authorizationPyPI · litellm
- CVE-2026-12796BerriAI litellm SSO Authentication Flow ui_sso.py get_redirect_response_from_openid session expirationPyPI · litellm
- CVE-2026-12795BerriAI litellm SSO Debug Flow ui_sso.py json.dumps missing authenticationPyPI · litellm
- CVE-2026-12773BerriAI litellm MCP Proxy user_api_key_auth_mcp.py UserAPIKeyAuth improper authenticationPyPI · litellm · fixed in 1.84.0
- CVE-2026-12772BerriAI litellm PROXY_ADMIN database API Key Generator login_utils.py authenticate_user session expirationPyPI · litellm
- CVE-2026-12771BerriAI litellm M2M JWT user_api_key_auth.py improper authorizationPyPI · litellm
- CVE-2026-12770BerriAI litellm Admin Key key_management_endpoints.py improper authorizationPyPI · litellm
- CVE-2026-56347AVideo TopMenu Plugin - Stored Cross-Site Scripting via Unescaped Menu Item FieldsPackagist · wwbn/avideo
- CVE-2026-56346AVideo - Unauthenticated PGP Message Decryption via decryptMessage.json.php EndpointPackagist · wwbn/avideo
- CVE-2026-56345AVideo - Arbitrary User Session Hijacking via Meet Plugin uploadRecordedVideo EndpointPackagist · wwbn/avideo
- CVE-2026-56341AVideo - Unauthenticated Access to Payment Log DataTables Endpoints via list.json.phpPackagist · wwbn/avideo
- CVE-2026-56340vLLM - Denial of Service via Unvalidated Multimodal EmbeddingsPyPI · vllm · fixed in 0.13.0
- CVE-2025-71379vllm - Regular Expression Denial of Service in Multiple ComponentsPyPI · vllm · fixed in 0.9.0