Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-65625Attacker-controlled AES-GCM authentication tag length allows tag forgery in joseHex · jose · fixed in 1.11.13
- CVE-2026-115927Tornado: Event loop blocking and excess memory use from chunked bodies with many small chunksPyPI · tornado · fixed in 6.6
- CVE-2026-115924Rembg: Unauthenticated SAM model injection permits local-file disclosure through malicious ONNX graphsPyPI · rembg · fixed in 2.0.82
- CVE-2026-115923Backstage catalog rules can be bypassed for URL locations using encoded path segmentsnpm · @backstage/plugin-catalog-backend · fixed in 3.9.2, 4.0.2
- CVE-2026-115922ONNX: Denial of service via unchecked expansion of packed sub-byte tensors in ONNX Python APIsPyPI · onnx · fixed in 1.22.0
- CVE-2026-115921ONNX: Null Pointer Dereference in ScanInferenceFunction Due to Missing Required AttributePyPI · onnx · fixed in 1.22.0
- CVE-2026-115920ONNX: Out-of-bounds read in ConvTranspose shape inference via undersized weight rankPyPI · onnx · fixed in 1.22.0
- CVE-2026-115919ONNX: Out-of-Bounds Read in RNN/GRU/LSTM Shape Inference (Old Opsets, Missing Rank Check)PyPI · onnx · fixed in 1.22.0
- CVE-2026-115918vLLM: Responses API bypasses trust_request_chat_template for chat_template_kwargsPyPI · vllm · fixed in 0.32.0
- CVE-2026-115917vLLM: Permissive default CORS origins allow cross-origin requests to the vLLM HTTP serverPyPI · vllm · fixed in 0.32.0
- CVE-2026-115916vLLM: Out-of-vocabulary prompt token id passes input validation and triggers a CUDA device-side assert (engine crash / DoS)PyPI · vllm · fixed in 0.32.0
- CVE-2026-115915vLLM: Untrusted EPS inputs can trigger denial of service or Ghostscript RCEPyPI · vllm · fixed in 0.32.0
- CVE-2026-115914vLLM DeepSeek-OCR image processing vulnerable to denial of servicePyPI · vllm · fixed in 0.32.0
- CVE-2026-115913vLLM: Phi-4 multimodal audio encoder materializes and retains full attention matrices: a single max-length audio OOM-crashes the vLLM enginePyPI · vllm · fixed in 0.32.0
- CVE-2026-115912vLLM: Public multimodal SHM handle forgery reaches worker-side `pickle.loads()` with insecure serialization disabledPyPI · vllm · fixed in 0.32.0
- CVE-2026-115911vLLM: DoS via unbounded chat_template Jinja2 rendering exhausts the renderer thread poolPyPI · vllm · fixed in 0.32.0
- CVE-2026-115910Python Social Auth: OpenID Connect nonce is not bound to the browser session, so a stolen authorization code logs the attacker in as the…PyPI · social-auth-core · fixed in 6.2.0
- CVE-2026-115909zip: Unbounded Symlink-Target Handling Can Abort Or Exhaust Memory During Extractioncrates.io · zip · fixed in 9.0.0
- CVE-2026-115908zip: Arbitrary file write outside the extraction directory, because ZipArchive::extract validates symlink targets lexically. (The defense against CVE-2025-29787 was broken in v7.2.0)crates.io · zip · fixed in 9.0.0
- CVE-2026-115907zip: legacy Shrink/Reduce/Implode decoder: denial of service from attacker-controlled ZIP64 uncompressed sizecrates.io · zip · fixed in 9.0.0
- CVE-2026-115906zip: AES Entry HMAC Authentication Bypass on Premature EOFcrates.io · zip · fixed in 9.0.0
- CVE-2026-115905zip: Critical Parser Differential & Security Control Bypass via Dual-Header Inconsistencies (Zip Cloaking) Leading to Arbitrary File…crates.io · zip · fixed in 9.0.5
- CVE-2026-110748Apache SIS: CWE-22: improper limitation of paths to GML, GeoTIFF, NADCON or NTv2 filesMaven · org.apache.sis:sis-metadata
- CVE-2026-97200Unbounded response body buffering and decompression in hackneyHex · hackney · fixed in 4.9.0
- CVE-2026-115693Custom cacerts or cacertfile do not restrict trust to the pinned CA in hackneyHex · hackney · fixed in 4.9.0
- CVE-2026-113440HTTP/1.1 and HTTP/2 redirects resend basic_auth and cookie to a different scheme or port in hackneyHex · hackney · fixed in 4.9.0
- CVE-2026-115700SSRF allowlist bypass via percent-encoded bracketed IPv6 or trailing-dot IP literal in hackneyHex · hackney · fixed in 4.9.0
- CVE-2026-112880CRLF injection in Proxy-Authorization header built from proxy_auth_fun in hackneyHex · hackney · fixed in 4.9.0
- CVE-2026-108529SETTINGS and stream-0 WINDOW_UPDATE frames trigger quadratic work over blocked streams in BanditHex · bandit · fixed in 1.14.0
- CVE-2026-110499Client-chosen HPACK encoder table size is applied uncapped, growing per-connection state with every response in BanditHex · bandit · fixed in 1.14.0