Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2024-27928Vantage6: 2FA can be circumvented with hacked email accessPyPI · vantage6 · fixed in 5.0.0
- CVE-2026-44645LiquidJS has a renderLimit DoS guard bypass via empty `{% for %}` bodynpm · liquidjs · fixed in 10.26.0
- CVE-2024-24769Vantage6: No limit on emails sent for password/MFA resetPyPI · vantage6 · fixed in 5.0.0
- CVE-2026-50268Steeltoe: OAEP setting silently selects PKCS#1 v1.5 paddingNuGet · steeltoe.configuration.encryption · fixed in 4.2.0
- CVE-2026-50267Steeltoe: TLS private keys written to /tmp with default permissions, never deletedNuGet · steeltoe.configuration.abstractions · fixed in 4.2.0
- CVE-2026-12568Arbitrary File Write in postman_download modulePyPI · bbot · fixed in 2.8.6
- CVE-2026-50202Steeltoe's static JWKS cache shared across schemes and never invalidatedNuGet · steeltoe.security.authentication.cloudfoundrybase, steeltoe.security.authentication.jwtbearer +1 · fixed in 3.4.0, 4.2.0
- CVE-2026-12567Symlink-following arbitrary write via github_workflows modulePyPI · bbot · fixed in 2.8.5
- CVE-2026-44644LiquidJS's strip_html filter bypass via newline characters in HTML tags enables XSSnpm · liquidjs · fixed in 10.26.0
- CVE-2026-12566SSRF via unvalidated WWW-Authenticate realm in docker_pull modulePyPI · bbot · fixed in 2.8.5
- CVE-2026-50201Steeltoe's sensitive actuators (heapdump/env) only require Restricted permissionNuGet · steeltoe.management.endpoint, steeltoe.management.endpointbase · fixed in 4.2.0, 3.4.0
- CVE-2026-12565Path Traversal (Zip-Slip) in unarchive modulePyPI · bbot · fixed in 2.8.5
- CVE-2026-50200Steeltoe's env sanitizer misses connection strings — leaks embedded DB passwordsNuGet · steeltoe.management.endpoint, steeltoe.management.endpointcore · fixed in 4.2.0, 3.4.0
- CVE-2026-54386marimo < 0.23.9 XSS via file Query Parameter in assets.pyPyPI · marimo · fixed in 0.23.9
- CVE-2026-48820CakePHP: View::element() is missing a path containment checkPackagist · cakephp/cakephp · fixed in 5.3.6, 5.2.13, 5.1.7 and more
- CVE-2026-50196Steeltoe.Discovery.Eureka: Unrecognized DataCenterInfo.Name poisons entire registry fetchNuGet · steeltoe.discovery.eureka · fixed in 4.2.0, 3.4.0
- CVE-2026-48990joserfc: b64=false RFC7797 JWS payloads bypass JWSRegistry payload-size limits during deserializationPyPI · joserfc · fixed in 1.6.7
- CVE-2026-12530Improper neutralization of argument delimiters in AWS Bedrock AgentCore Python SDK install_packages()PyPI · bedrock-agentcore · fixed in 1.6.1
- CVE-2026-50194Steeltoe vulnerable to management-port isolation bypass via spoofed Host headerNuGet · steeltoe.management.endpoint, steeltoe.management.endpointcore · fixed in 4.2.0, 3.4.0
- CVE-2026-48989Windows-MCP: HTTP transports expose unauthenticated PowerShell control with wildcard CORSPyPI · windows-mcp · fixed in 0.7.5
- CVE-2026-48988markdown-it: Quadratic complexity DoS in smartquotes rule via replaceAt string operationsnpm · markdown-it · fixed in 14.2.0
- CVE-2026-48979PHP Standard Library: HTTP/2 server-side missing content-length validation enables request smugglingPackagist · php-standard-library/h2, php-standard-library/php-standard-library · fixed in 6.1.2, 6.2.1
- CVE-2026-11407Pimcore CMS 12.3.8 Twig Sandbox Bypass via SecurityPolicy checkMethodAllowedPackagist · pimcore/pimcore
- CVE-2026-48817Starlette: Arbitrary HTTP method dispatched to `HTTPEndpoint` attributes via `getattr`PyPI · starlette · fixed in 1.1.0
- CVE-2026-48814Network-AI: Empty default secret still authorizes all requests (Incomplete fix for CVE-2026-46701)npm · network-ai · fixed in 5.7.2
- CVE-2026-53870Hermes Agent < 0.16.0 - Sensitive File Permission Vulnerability in Store FilesPyPI · hermes-agent · fixed in 0.16.0
- CVE-2026-53869Hermes Agent < 0.16.0 - DNS Rebinding Bypass via WebSocket EndpointsPyPI · hermes-agent · fixed in 0.16.0
- CVE-2026-48818Starlette: SSRF and NTLM credential theft via UNC paths in StaticFiles on WindowsPyPI · starlette · fixed in 1.1.0
- CVE-2026-11525undici vulnerable to Set-Cookie SameSite attribute downgrade via permissive substring matchingnpm · undici · fixed in 6.27.0, 7.28.0, 8.5.0
- CVE-2026-6733undici vulnerable to HTTP response queue poisoning via keep-alive socket reusenpm · undici · fixed in 6.27.0, 7.28.0, 8.5.0