Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-42877FacturaScripts: Stored XSS via product reference in sales/purchasesPackagist · facturascripts/facturascripts
- CVE-2026-42879FacturaScripts: Authenticated Remote Code Execution (RCE) via GIF Image Upload in Product ImagesPackagist · facturascripts/facturascripts
- CVE-2026-42878FacturaScripts: Unauthenticated phpinfo() Disclosure via Installer Endpoint in FacturaScriptsPackagist · facturascripts/facturascripts
- CVE-2026-45046Gryph Agents Payload Filter Fails to Strip Tool Payload for Sensitive ContentGo · github.com/safedep/gryph · fixed in 0.7.0
- CVE-2026-44635Kysely: JSON-path traversal injection via unsanitized path-leg metacharacters in `JSONPathBuilder.key()` / `.at()`npm · kysely · fixed in 0.28.17
- CVE-2026-45088Dalfox: Unauthenticated Arbitrary File Read with Out-of-Band Exfiltration via `custom-payload-file` in Dalfox Server ModeGo · github.com/hahwul/dalfox, github.com/hahwul/dalfox/v2 · fixed in 2.13.0
- CVE-2026-45087Dalfox: Unauthenticated Remote Code Execution via `found-action` in Dalfox Server ModeGo · github.com/hahwul/dalfox, github.com/hahwul/dalfox/v2 · fixed in 2.13.0
- CVE-2026-45089Dalfox: Unauthenticated Arbitrary File Create/Append via `output` Option in Dalfox Server ModeGo · github.com/hahwul/dalfox, github.com/hahwul/dalfox/v2 · fixed in 2.13.0
- CVE-2026-45090Dalfox: Unauthenticated Remote DoS via Closed-Channel Write in `ParameterAnalysis` (server mode)Go · github.com/hahwul/dalfox, github.com/hahwul/dalfox/v2 · fixed in 2.13.0
- CVE-2026-42553Cinny: Access token disclosure via invalidated emoji pack avatar URL in service workernpm · cinny · fixed in 4.10.3
- CVE-2026-44345BentoML: Dockerfile command injection via docker.base_imagePyPI · bentoml · fixed in 1.4.39
- CVE-2026-44346BentoML: Dockerfile command injection via envs[*].name in bentofile.yamlPyPI · bentoml · fixed in 1.4.39
- CVE-2026-44521elFinder: SQL Injection MySQL Volume Driver (elFinderVolumeMySQL)Packagist · studio-42/elfinder · fixed in 2.1.68
- CVE-2026-48147Budibase: Unanchored Regex in `matchers.ts` Allows CSRF Bypass via Query String Injection in Budibase Workernpm · @budibase/backend-core · fixed in 3.35.4
- CVE-2026-48148Budibase: Unvalidated VectorDB Host Parameter Enables SSRFnpm · @budibase/server · fixed in 3.35.3
- CVE-2026-45548Budibase: SSRF in AI Extract File Automation Step via Missing IP Blacklist Validationnpm · @budibase/server · fixed in 3.34.8
- CVE-2026-45715Budibase: SSRF Bypass via HTTP Redirect in REST Datasource Integrationnpm · @budibase/server · fixed in 3.38.1
- CVE-2026-45716Budibase: Builder-to-Admin Privilege Escalation via onboardUsers Endpoint Without SMTP Configurationnpm · @budibase/worker · fixed in 3.38.1
- CVE-2026-45717Budibase: `PUT /api/datasources/:datasourceId` is protected only by `TABLE/READ` permission instead of builder access, allowing any authenticated app user to overwrite datasource connection parameters including host, port, and URL.npm · @budibase/server · fixed in 3.38.1
- CVE-2026-45718Budibase: Row Action Trigger Bypasses View Row Filter Security Boundary Allowing Action on Out-of-Scope Rowsnpm · budibase · fixed in 3.38.1
- CVE-2026-45719Budibase: CouchDB Reduce Injection via Unsanitized Calculation Parameter in V1 Views APInpm · @budibase/server · fixed in 3.38.1
- CVE-2026-46424Budibase: Missing Cache Invalidation on Public API Role Unassignment Allows Revoked Users to Retain Privileges for Up to 1 Hournpm · @budibase/backend-core · fixed in 3.38.2
- CVE-2026-46426Budibase: Unrestricted Upload of File with Dangerous Typenpm · budibase · fixed in 3.38.2
- CVE-2026-48128Budibase: SSRF via User-Controlled queryId in Automation Execute Query Stepnpm · budibase · fixed in 3.39.0
- CVE-2026-48146Budibase: SSRF via OAuth2 Config Validation — Missing fetchWithBlacklist Protectionnpm · @budibase/server · fixed in 3.39.0
- CVE-2026-48150Budibase: Workspace-scoped builder escalates to global admin via /api/public/v1/roles/assignnpm · @budibase/server · fixed in 3.39.0
- CVE-2026-48151Budibase: Webhook schema endpoint authorization bypass allows unauthenticated mutation of webhook and automation schemanpm · @budibase/server · fixed in 3.39.0
- CVE-2026-48152Budibase: Basic app users can exfiltrate stored REST datasource auth by rewriting datasource base URLnpm · @budibase/server · fixed in 3.39.0
- CVE-2026-48153Budibase: SSRF via OAuth2 token endpoint URL reaches internal hosts and cloud metadatanpm · @budibase/server · fixed in 3.39.0
- CVE-2026-45061Budibase: SSRF via trivial `.tar.gz` substring bypass in Plugin URL upload (`/api/plugin`)npm · budibase · fixed in 3.35.10