Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-44652SillyTavern: SSRF vulnerability in the CORS proxy middlewarenpm · sillytavern · fixed in 1.18.0
- CVE-2026-46372SillyTavern: SSRF in SearXNG Search Proxy via Unvalidated baseUrlnpm · sillytavern · fixed in 1.18.0
- CVE-2026-44697Klever-Go MultiDataInterceptor: remote OOM via crafted compressed P2P payloadGo · github.com/klever-io/klever-go
- CVE-2026-45625Arcane: Missing admin authorization on git repository endpoints allows non-admin users to exfiltrate stored Git credentials and tamper with GitOps configsGo · github.com/getarcaneapp/arcane/backend · fixed in 1.19.0
- CVE-2026-45626Arcane: OS Command Injection in Volume Browser ListDirectory via path query parameterGo · github.com/getarcaneapp/arcane/backend
- CVE-2026-45627Arcane: Unauthenticated reflected XSS via SVG color parameter in /api/app-images/logo enables admin account takeoverGo · github.com/getarcaneapp/arcane/backend · fixed in 1.19.0
- CVE-2026-47125Arcane: Missing admin authorization on global variables endpointGo · github.com/getarcaneapp/arcane/backend · fixed in 1.19.2
- CVE-2026-47179Arcane: Authenticated Arbitrary Host File Read via Docker Compose Include Directives in ArcaneGo · github.com/getarcaneapp/arcane/backend · fixed in 1.19.4
- CVE-2026-45577Neotoma: Unauthenticated Inspector/API access via reverse-proxy loopback auth bypassnpm · neotoma · fixed in 0.11.1
- CVE-2026-10108xiaomusic 0.5.7 Path Traversal via GET /music endpointPyPI · xiaomusic · fixed in 0.5.8
- CVE-2026-45660Statamic: Server-Side Request Forgery via GlidePackagist · statamic/cms · fixed in 5.73.22, 6.18.1
- CVE-2026-10105agno 2.6.5 SQL Injection via ClickHouse delete_by_metadata()PyPI · agno
- CVE-2026-48501GitHub CLI tokens leak via `gh attestation` commandsGo · github.com/cli/cli, github.com/cli/cli/v2 · fixed in 2.93.0
- CVE-2026-35674OpenClaw < 2026.5.18 - Scope Bypass via Inherited chat.send Routenpm · openclaw · fixed in 2026.5.18
- CVE-2026-35673OpenClaw < 2026.4.29 - SSRF Policy Bypass via Browser Debug/Export Routesnpm · openclaw · fixed in 2026.4.29
- CVE-2026-35630OpenClaw < 2026.5.18 - QQBot Missing Approver Identity Enforcement in Native Approval Buttonsnpm · openclaw · fixed in 2026.5.18
- CVE-2026-34507OpenClaw < 2026.4.29 - Policy Bypass in QQBot Admin Commands via DM-only and allowFrom Checksnpm · openclaw · fixed in 2026.4.29
- CVE-2026-32906OpenClaw < 2026.5.12 - Privilege Escalation in Slack Plugin Approvals via Exec Approver Gatenpm · openclaw · fixed in 2026.5.12
- CVE-2026-32905OpenClaw < 2026.5.4 - Unauthorized Device-Pairing Bootstrap Code Issuance via Chat Commandnpm · openclaw · fixed in 2026.5.4
- CVE-2026-41150Mermaid Gantt Charts are vulnerable to an Infinite Loop DoSnpm · mermaid · fixed in 11.15.0, 10.9.6
- CVE-2026-41159Mermaid: Improper sanitization of configuration leads to CSS injectionnpm · mermaid · fixed in 11.15.0, 10.9.6
- CVE-2026-45609mcp-security: Unvalidated URL Fetching (SSRF)Maven · org.springaicommunity:mcp-client-security · fixed in 0.1.9
- CVE-2026-46510Prototype pollution in form-data-objectizer via bracket-notation form keysnpm · form-data-objectizer · fixed in 1.0.1
- CVE-2026-45582n8n-MCP: Workflow telemetry sanitizer could retain partial values from URL-shaped node parametersnpm · n8n-mcp · fixed in 2.51.3
- CVE-2026-45707n8n-MCP: Multi-tenant MCP requests fall back to process-level n8n credentials when tenant headers are absent or incompletenpm · n8n-mcp · fixed in 2.51.2
- CVE-2026-45580WWBN AVideo Live: stored XSS via unescaped stream key in modeYoutubeLive.php class attributePackagist · wwbn/avideo
- CVE-2026-45578WWBN AVideo Live: OS command injection in on_publish.php execAsync via unescaped m3u8 URLPackagist · wwbn/avideo
- CVE-2026-45610WWBN AVideo plugin/LoginControl/set.json.php: 2FA toggle endpoint has no CSRF protection, letting an attacker page silently disable a logged-in victim's 2FAPackagist · wwbn/avideo
- CVE-2026-45619AVideo CVE-2026-43884 incomplete fix - `isSSRFSafeURL()` call sites still discard the `$resolvedIP` out-param at master HEAD postPackagist · wwbn/avideo
- CVE-2026-45620AVideo CVE-2026-43881 incomplete fix - `objects/mention.json.php:17` is an unauthenticated user enumerationPackagist · wwbn/avideo