Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-50628Apache CXF: OAuth2: Inverted IP Binding Check Defeats Security ControlMaven · org.apache.cxf:cxf-rt-rs-security-oauth2 · fixed in 4.2.2, 4.1.7
- CVE-2026-50627Apache CXF: OAuth2: Missing JWT Audience and Issuer Validation in Access Token ValidatorMaven · org.apache.cxf:cxf-rt-rs-security-oauth2 · fixed in 4.2.2, 4.1.7
- CVE-2026-49875Apache CXF: XML External Entity (XXE) Injection in W3CMultiSchemaFactory and EndpointReferenceUtilsMaven · org.apache.cxf:cxf-core · fixed in 4.2.2, 4.1.7, 3.6.12
- CVE-2026-50623Apache CXF: Authentication Bypass in OAuth2 TokenIntrospectionServiceMaven · org.apache.cxf:cxf-rt-rs-security-oauth2 · fixed in 4.2.2, 4.1.7
- CVE-2026-44892Netty has a Vulnerable Default Configuration Which Leads to Denial of Service via Unbounded HTTP/3 Header SizeMaven · io.netty:netty-codec-http3 · fixed in 4.2.15.Final
- CVE-2026-44890Netty has Unbounded Direct Memory Consumption in its RedisDecoderMaven · io.netty:netty-codec-redis · fixed in 4.2.15.Final, 4.1.135.Final
- CVE-2026-44250Netty: Memory Exhaustion in RedisArrayAggregator due to Deeply Nested ArraysMaven · io.netty:netty-codec-redis · fixed in 4.2.15.Final, 4.1.135.Final
- CVE-2026-44249Netty has an IPv6 Subnet Filter Bypass via Incorrect Comparator MaskingMaven · io.netty:netty-handler · fixed in 4.2.15.Final, 4.1.135.Final
- CVE-2026-53819OpenClaw < 2026.5.27 - Arbitrary Homebrew Executable Execution via Workspace .env Overridenpm · openclaw · fixed in 2026.5.27
- CVE-2026-53818OpenClaw < 2026.4.24 - Owner-Only Tool Policy Bypass via MCP Loopbacknpm · openclaw · fixed in 2026.4.24
- CVE-2026-53817OpenClaw < 2026.5.22 - Control UI Locality Spoofing in Device Pairingnpm · openclaw · fixed in 2026.5.22
- CVE-2026-53816OpenClaw < 2026.5.18 - Exec Lifecycle Event Forgery via Paired Nodenpm · openclaw · fixed in 2026.5.18
- CVE-2026-53815OpenClaw < 2026.5.19 - Channel Allowlist Bypass in Message Read Actionsnpm · openclaw · fixed in 2026.5.19
- CVE-2026-53814OpenClaw < 2026.5.20 - Privilege Escalation via Hook-Triggered CLI MCP Tool Authoritynpm · openclaw · fixed in 2026.5.20
- CVE-2026-53813OpenClaw < 2026.4.25 - Arbitrary Artifact Loading via Fake Package Root Resolutionnpm · openclaw · fixed in 2026.4.25
- CVE-2026-53812OpenClaw < 2026.5.18 - Private-Network Navigation Bypass via Browser Act Interactionsnpm · openclaw · fixed in 2026.5.18
- CVE-2026-53811OpenClaw < 2026.5.7 - Privilege Escalation via Mutable Display Names in Matrix allowFromnpm · openclaw · fixed in 2026.5.7
- CVE-2026-53810OpenClaw < 2026.5.18 - Arbitrary Code Execution via Unscanned Marketplace Runtime Extension Metadatanpm · openclaw · fixed in 2026.5.18
- CVE-2026-53809OpenClaw < 2026.4.25 - Provider Alias Confusion in Embedded Runner Policynpm · openclaw · fixed in 2026.4.25
- CVE-2026-53808OpenClaw < 2026.5.6 - Approval Policy Bypass in Skill Workshop Apply Flownpm · openclaw · fixed in 2026.5.6
- CVE-2026-53807OpenClaw < 2026.5.6 - Authorization Bypass in Telegram Interactive Callbacks via commands.allowFromnpm · openclaw · fixed in 2026.5.6
- CVE-2026-53806OpenClaw < 2026.5.12 - Shell Option Parsing Bypass in Exec Revalidationnpm · openclaw · fixed in 2026.5.12
- CVE-2026-53782Summarize < 0.17.0 SSRF via podcast:transcript URL fetchnpm · @steipete/summarize · fixed in 0.17.0
- CVE-2026-53781Summarize < 0.17.0 Disk Exhaustion via Uncapped Media Downloadnpm · @steipete/summarize-core · fixed in 0.17.0
- CVE-2026-45802FPDI: Memory Exhaustion and Endless Loop in FPDI leads to Denial of ServicePackagist · setasign/fpdi · fixed in 2.6.7
- CVE-2026-47250mcp-server-kubernetes: kubectl-generic flag injection enables Kubernetes bearer token exfiltrationnpm · mcp-server-kubernetes · fixed in 3.7.0
- CVE-2026-46519mcp-server-kubernetes Affected By Tool Access Control Bypass: Presentation-Layer Filtering Without Execution-Layer Enforcementnpm · mcp-server-kubernetes · fixed in 3.6.0
- CVE-2026-47157aiograpi: Unsafe signup challenge path handlingPyPI · aiograpi · fixed in 0.9.10
- CVE-2026-11986Keycloak-rest-admin-ui-ext: authorization bypass vulnerability in the admin-ui-ext bulk role-mapping-delete endpoints of keycloakMaven · org.keycloak:keycloak-rest-admin-ui-ext · fixed in 26.7.0
- CVE-2026-49982tmp: Type-confusion bypass of _assertPath in tmp@0.2.6 allows path traversal via non-string prefix/postfix/templatenpm · tmp · fixed in 0.2.7