Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-10720MicroCeph path traversal issue in the remote-import APIGo · github.com/canonical/microceph/microceph · fixed in 0.0.0-20260609072127-5c2760d8fb76
- CVE-2026-11752A vulnerability has been identified in armeria-xds versions 1.38.0 through 1.39.0, where DataSourceStream in the xDS module can resolve contMaven · com.linecorp.armeria:armeria-xds · fixed in 1.40.0
- CVE-2026-56078PraisonAI - Arbitrary File Read and Write via Path Traversal in MultiAgentMonitorPyPI · praisonaiagents · fixed in 1.5.115
- CVE-2026-56075PraisonAI - Arbitrary Shell Command Execution via Hardcoded Approval Mode OverridePyPI · praisonai · fixed in 4.5.128
- CVE-2026-56074PraisonAI - Tool Approval Cache Bypass via Coarse-Grained CachingPyPI · praisonaiagents · fixed in 4.5.128
- CVE-2026-49205phpMyFAQ: Missing userHasPermission() in 4 API write endpoints (CVE-2026-24421 Incomplete Fix)Packagist · phpmyfaq/phpmyfaq, thorsten/phpmyfaq · fixed in 4.1.4
- CVE-2026-54017Open WebUI: Path traversal / SSRF in terminal server proxy via encoded path traversalPyPI · open-webui · fixed in 0.9.6
- CVE-2026-49257mcp-pinot: Unauthenticated tool invocation via default oauth_enabled=False + host 0.0.0.0 bindPyPI · mcp-pinot-server · fixed in 3.1.0
- CVE-2026-49252deepstream is vulnerable to prototype pollutionnpm · @deepstream/server · fixed in 10.0.5
- CVE-2025-53114CometD has acknowledgement extension out of memoryMaven · org.cometd.java:cometd-java-server-common · fixed in 5.0.23, 6.0.19, 7.0.19 and more
- CVE-2026-44691In Eclipse Theia versions prior to 1.69.0, custom task definitions in workspace files (e.g.npm · @theia/debug, @theia/task +1 · fixed in 1.69.0
- CVE-2026-22551In Eclipse Theia versions prior to 1.71.0, the AI chat rendered Markdown image tags from AI responses, triggering HTTP requests to arbitrarynpm · @theia/ai-chat, @theia/ai-chat-ui +5 · fixed in 1.71.0
- CVE-2025-58175GeoServer has a Server-Side Request Forgery (SSRF) Vulnerability in its XML Entity ResolutionMaven · org.geoserver.web:gs-web-app, org.geoserver:gs-main · fixed in 2.26.4, 2.27.3
- CVE-2025-52465GeoServer has an arbitrary file write vulnerability in its Master Password Dump PageMaven · org.geoserver.web:gs-web-app, org.geoserver.web:gs-web-sec-core · fixed in 2.27.3, 2.26.4
- CVE-2026-46580In Eclipse Theia versions prior to 1.71.0, files matching the pattern .prompts/*.prompttemplate in a workspace were automatically loaded andnpm · @theia/ai-chat, @theia/ai-chat-ui +4 · fixed in 1.71.0
- CVE-2025-27511GeoServer DB2 DataStore Extension has a JNDI Vulnerability via Store ConnectionMaven · org.geoserver.extension:gs-db2 · fixed in 2.27.0
- CVE-2026-44688In Eclipse Theia versions prior to 1.71.0, the AI chat agent processed workspace file and directory names as part of its prompt context withnpm · @theia/ai-chat, @theia/ai-chat-ui +5 · fixed in 1.71.0
- CVE-2026-50141Woodpecker gRPC agent_id metadata can be spoofed- cross-tenant agent impersonationGo · go.woodpecker-ci.org/woodpecker, go.woodpecker-ci.org/woodpecker/v2 +1 · fixed in 3.14.1
- CVE-2026-11719An authenticated authorization bypass vulnerability exists in MCP Toolbox for Databases due to missing scope enforcement across older protocGo · github.com/googleapis/mcp-toolbox · fixed in 1.4.0
- CVE-2026-11718An authentication bypass vulnerability exists in the generic opaque token validation path (validateOpaqueToken) of googleapis/mcp-toolbox.Go · github.com/googleapis/mcp-toolbox · fixed in 1.4.0
- CVE-2026-11717An authentication bypass vulnerability exists in the generic opaque token validation path (validateOpaqueToken) of googleapis/mcp-toolbox.Go · github.com/googleapis/mcp-toolbox · fixed in 1.4.0
- CVE-2026-55746Cotonti stored XSS via PFS folder titlePackagist · cotonti/cotonti
- CVE-2026-55745Cotonti CSRF in PFS folder edit allows unauthorized folder modificationPackagist · cotonti/cotonti
- CVE-2026-55744Cotonti CSRF in PFS allows forced arbitrary file uploadPackagist · cotonti/cotonti
- CVE-2026-55742Cotonti CSRF in admin.rights.php allows privilege escalationPackagist · cotonti/cotonti
- CVE-2026-45357LiquidJS: Memory and render limit bypass via unbounded width padding in `date` filter (strftime)npm · liquidjs · fixed in 10.26.0
- CVE-2026-44646LiquidJS: `{% render %}` tag silently bypasses per-render `ownPropertyOnly:true` via `Context.spawn()`npm · liquidjs · fixed in 10.26.0
- CVE-2026-54533vantage6 node has an Improper Access Control issuePyPI · vantage6 · fixed in 5.0.0
- CVE-2026-54445Vantage6: Set admin user and password from environment or configurationPyPI · vantage6 · fixed in 5.0.0
- CVE-2026-45617LiquidJS: ReDoS via Quadratic Backtracking in `strip_html` Filter Regexnpm · liquidjs · fixed in 10.26.0