Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-109584HTTP/2 cookie crumb join expands a small HPACK header block into an unbounded allocation in BanditHex · bandit · fixed in 1.14.0
- CVE-2026-111103HTTP/2 StreamError recovery rolls back connection state and bypasses per-connection limits in BanditHex · bandit · fixed in 1.14.0
- CVE-2026-111101HTTP/1.1 chunked request bodies made of 1-byte chunks amplify memory use in BanditHex · bandit · fixed in 1.14.0
- CVE-2026-113436Quadratic bignum parsing of Content-Length and Host port values in BanditHex · bandit · fixed in 1.14.0
- CVE-2026-110314WebSocket frames keep reaching the WebSock after a server-initiated close in BanditHex · bandit · fixed in 1.14.0
- CVE-2026-114213WebSocket 1-byte continuation frames bypass `max_fragmented_message_size` in BanditHex · bandit · fixed in 1.14.0
- CVE-2026-114216Chunk extensions accept bare LF and CR, enabling request smuggling in BanditHex · bandit · fixed in 1.14.0
- CVE-2026-115269HTTP/2 WINDOW_UPDATE and SETTINGS frames reset the request body read timeout in BanditHex · bandit · fixed in 1.14.0
- CVE-2026-108525HTTP/2 inbound flow control is not enforced, letting a client queue unbounded DATA in stream processes in BanditHex · bandit · fixed in 1.14.0
- RUSTSEC-2026-0412Arbitrary code execution when rerunning tests from a portable recordingcrates.io · cargo-nextest · fixed in 0.9.150
- RUSTSEC-2026-0413Use-after-free of caller-owned server name in client connection constructorscrates.io · rustls-ffi · fixed in 0.15.7
- CVE-2026-95628Apache Camel: Camel-Docling Custom CLI Argument Path Validation Does Not Reject Absolute Paths (Incomplete Fix of CVE-2026-40047)Maven · org.apache.camel:camel-docling · fixed in 4.18.5, 4.22.2
- CVE-2026-95629Apache Camel: Camel-Docling Unvalidated Output Path Header Enables Writing Conversion Output to an Arbitrary DirectoryMaven · org.apache.camel:camel-docling · fixed in 4.18.5, 4.22.2
- CVE-2026-95663Apache Camel: Camel-Keycloak Security Policy Accepts Expired Access Tokens Because Cached Token Introspection Results Are Not Bounded by…Maven · org.apache.camel:camel-keycloak · fixed in 4.18.5, 4.22.2
- CVE-2026-101259Apache Camel: Camel-CoAP Information Disclosure via Unmuted Consumer ExceptionsMaven · org.apache.camel:camel-coap · fixed in 4.18.5, 4.22.2
- CVE-2026-96581An upsert on the primary key in Ash ignores attribute multitenancy, so one tenant can read, overwrite and take over another tenant's recordsHex · ash · fixed in 3.37.2
- CVE-2026-115627AshPostgres ignores attribute multitenancy on the join resource when loading many_to_many and through relationships, returning records related through other tenants' rowsHex · ash_postgres · fixed in 2.15.2
- CVE-2026-115635AshPostgres returns another tenant's record for a skipped upsert when return_skipped_upsert? is setHex · ash_postgres · fixed in 2.15.2
- CVE-2026-114214Loading a through relationship with a limit of 1 in Ash ignores the through path and returns unrelated destination recordsHex · ash · fixed in 3.37.1
- CVE-2026-116178vLLM 0.20.0 before 0.30.0 DoS via /inference/v1/generate mm_placeholdersPyPI · vllm · fixed in 0.30.0
- CVE-2026-116177vLLM 0.10.2 before 0.25.0 DoS via Nemotron-VL Processor Decompression-Bomb Guard BypassPyPI · vllm · fixed in 0.25.0
- CVE-2026-116176vLLM 0.9.2 before 0.24.0 SSRF via X-Request-Id in P2pNcclConnectorPyPI · vllm · fixed in 0.24.0
- CVE-2026-116173vLLM 0.22.0 before 0.24.0 Denial of Service via gRPC output_candidates.token_idsPyPI · vllm · fixed in 0.24.0
- RUSTSEC-2026-0408Aliasing violations in splice, mutable iteration and cursorscrates.io · skiplist · fixed in 1.3.0
- RUSTSEC-2026-0409Use-after-free from a comparator that answers inconsistentlycrates.io · skiplist · fixed in 1.3.0
- GHSA-H4FR-CMH5-QR62Fallow: A `.*` glob segment let an analyzed repository make Fallow test paths in the parent of the project rootnpm · @fallow-cli/fallow-node, fallow · fixed in 3.34.0
- GHSA-F2HQ-32VH-53CCpostal-mime: Quadratic CPU consumption when decoding a header of many joinable RFC 2047 base64 encoded wordsnpm · postal-mime · fixed in 4.0.8
- GHSA-8C8M-P3M8-CJG8Nodemailer: A nested comment ends early in addressparser, releasing the rest of the comment as a recipientnpm · nodemailer · fixed in 10.1.4
- GHSA-M943-M63M-W62WNodemailer: A ";" inside a quoted string or comment ends an address group early in addressparser, turning display text into a recipientnpm · nodemailer · fixed in 10.1.4
- GHSA-XMJ3-9GF7-H52Wsetuptools: Windows path escape via namespace_packages.txt during legacy wheel installation DescriptionPyPI · setuptools · fixed in 84.1.0