Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-9678undici vulnerable to cross-user information disclosure via shared cache whitespace bypassnpm · undici · fixed in 7.28.0, 8.5.0
- CVE-2026-9679undici vulnerable to HTTP header injection via Set-Cookie percent-decodingnpm · undici · fixed in 6.27.0, 7.28.0, 8.5.0
- CVE-2026-9697undici vulnerable to TLS certificate validation bypass via dropped requestTls in SOCKS5 ProxyAgentnpm · undici · fixed in 7.28.0, 8.5.0
- CVE-2026-6734undici vulnerable to cross-origin request routing via SOCKS5 proxy pool reusenpm · undici · fixed in 7.28.0, 8.2.0
- CVE-2026-9675undici WebSocket client vulnerable to denial of service via cumulative fragment bypassnpm · undici · fixed in 8.5.0
- CVE-2026-12151undici WebSocket client vulnerable to denial of service via fragment count bypassnpm · undici · fixed in 6.27.0, 7.28.0, 8.5.0
- CVE-2026-12515Katello: missing repository authorization in content_uploads exposes cross-product content existenceRubyGems · katello · fixed in 4.21.0.rc1
- CVE-2026-53875picklescan - Scanning Bypass via Dynamic Eval in scan_pytorchPyPI · picklescan · fixed in 1.0.3
- CVE-2026-53874picklescan - Arbitrary Code Execution via Obfuscated eval CallPyPI · picklescan · fixed in 1.0.1
- CVE-2026-53873picklescan - Arbitrary Code Execution via profile.run() Blocklist BypassPyPI · picklescan · fixed in 1.0.4
- CVE-2026-53872picklescan - Arbitrary File Read via Unsafe Pickle DeserializationPyPI · picklescan · fixed in 0.0.35
- CVE-2026-3490picklescan - Universal Blocklist Bypass via pkgutil.resolve_namePyPI · picklescan · fixed in 1.0.4
- CVE-2025-71325picklescan - Detection Bypass via STACK_GLOBAL Opcode Parsing Logic FlawPyPI · picklescan · fixed in 0.0.27
- CVE-2025-71323picklescan - Remote Code Execution via Unblocked ctypes ModulePyPI · picklescan · fixed in 0.0.33
- CVE-2025-71322PickleScan - Unsafe Globals Check Bypass via pty.spawn FunctionPyPI · picklescan · fixed in 0.0.33
- CVE-2025-71321picklescan - Arbitrary File Writing via distutils Module BypassPyPI · picklescan · fixed in 0.0.33
- CVE-2025-71320picklescan - Remote Code Execution via Incomplete Disallowed InputsPyPI · picklescan · fixed in 0.0.33
- CVE-2026-47103Python StateMachine 3.0.0 < 3.2.0 RCE via SCXML eval() InjectionPyPI · python-statemachine · fixed in 3.2.0
- CVE-2026-55748OpenStack Horizon before 25.7.4 produces scripts for OpenStack RC file downloading that may have a crafted project name with shell metacharaPyPI · horizon
- CVE-2026-49268Apache Shiro: LDAP DN Injection in DefaultLdapRealmMaven · org.apache.shiro:shiro-core · fixed in 2.2.1, 3.0.0-alpha-2
- CVE-2026-12491Vllm: vllm: image exif rotation & png trns transparency not normalized, causing mismatch between model input and expectationsPyPI · vllm · fixed in 0.24.0
- CVE-2026-47340Apache DolphinScheduler: An incorrect authorization vulnerability allows authenticated users to access alert instances associated with alert groups they do not have permission to access.Maven · org.apache.dolphinscheduler:dolphinscheduler-api · fixed in 3.4.2
- CVE-2026-32967Apache DolphinScheduler: The `/v2` experimental interface lacks permission checksMaven · org.apache.dolphinscheduler:dolphinscheduler-api · fixed in 3.4.2
- CVE-2026-42357Apache DolphinScheduler: Incorrect Authorization vulnerability allows users to access workflow instance information belonging to projects they do not have permission to access.Maven · org.apache.dolphinscheduler:dolphinscheduler-api · fixed in 3.4.2
- CVE-2026-41280Apache DolphinScheduler: Incorrect Authorization vulnerability allows users with system login privileges to delete task definitions in unauthorized projectsMaven · org.apache.dolphinscheduler:dolphinscheduler-api · fixed in 3.4.2
- CVE-2026-32966Apache DolphinScheduler: DataSource API Missing Authorization Check Leads to Arbitrary Data Source Metadata DisclosureMaven · org.apache.dolphinscheduler:dolphinscheduler-api · fixed in 3.4.2
- CVE-2026-50203Apache Airflow SFTP provider: Path traversal in SFTPHook.retrieve_directory allows local file write outside the destination directory via malicious server-supplied directory-entry namesPyPI · apache-airflow-providers-sftp · fixed in 5.8.1
- CVE-2025-26240In JazzCore python-pdfkit 1.0.0, the from_string method enables the execution of JavaScript code within the context of the server applicatioPyPI · pdfkit
- CVE-2026-48797Backpropagate: backprop ui --auth and backprop ui --share do not enforce authenticationnpm · @mcptoolshop/backpropagate · fixed in 1.2.0
- CVE-2026-44587CarrierWave has a denylisted_content_type bypass via Unescaped Regex MetacharactersRubyGems · carrierwave · fixed in 3.1.3, 2.2.7