Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-115897Serialize JavaScript: Cross-site scripting (XSS) via unescaped </script at the end of a serialized function bodynpm · serialize-javascript · fixed in 7.1.3
- CVE-2026-115895Happy DOM: Incomplete fix for CVE-2026-33943: unsanitized import alias leads to host code executionnpm · happy-dom · fixed in 21.0.4
- GHSA-7XGJ-8392-5Q4RFastMCP: Post-transform component authorization is skipped on direct callsPyPI · fastmcp, fastmcp-slim · fixed in 3.4.10, 4.1.2
- GHSA-VQQP-X5QM-5QP4FastMCP MCP client wrappers construct M2M OAuth providers without issuer binding — client secret redirectable to attacker-advertised authoriPyPI · fastmcp, fastmcp-slim · fixed in 4.1.2
- CVE-2026-115893Wasmtime: Cranelift backend on aarch64 can jump to incorrect target on large Wasm `br_table` instructioncrates.io · wasmtime · fixed in 36.0.19, 48.0.7, 49.0.4
- CVE-2026-115892Wasmtime: Panic lowering a host-created component model stream into a guest that expects a different payload typecrates.io · wasmtime · fixed in 48.0.7, 49.0.4
- CVE-2026-115889Wasmtime: Bit-packing in Cranelift compiler causes silent overflow and miscompilationcrates.io · wasmtime · fixed in 36.0.19, 43.0.0
- CVE-2026-115887graphql-scalars PhoneNumber scalar is vulnerable to regular expression denial of servicenpm · graphql-scalars · fixed in 2.0.1
- CVE-2026-115886MLflow: SSRF on unauthenticated MLflow servers via third-party scorer kwargs in the scorer invoke, register, and GenAI evaluate endpointsPyPI · mlflow · fixed in 3.17.0
- CVE-2026-115885LangGraph CLI prints the registry push token in `langgraph deploy --verbose` outputPyPI · langgraph-cli · fixed in 0.4.32
- CVE-2026-115883LangGraph: Namespace labels containing `.` reach other namespaces in Postgres and SQLite storesPyPI · langgraph-checkpoint-postgres, langgraph-checkpoint-sqlite · fixed in 3.1.3, 3.1.2
- CVE-2026-115877Twisted: HTTP Request Smuggling in twisted.web via a Bare CR or LF in a Header ValuePyPI · twisted · fixed in 26.10.0rc1
- CVE-2026-83813Twisted: DNS Response Spoofing in twisted.names Due to Missing Source Address ValidationPyPI · twisted · fixed in 26.10.0rc1
- CVE-2026-115778Twisted: Unauthenticated Remote Denial of Service in the Twisted conch Telnet Transport via an Unbounded Subnegotiation BufferPyPI · twisted · fixed in 26.10.0rc1
- CVE-2026-115776Twisted: Unauthenticated Remote Denial of Service in the Twisted IRC Server via an Unbounded Line BufferPyPI · twisted · fixed in 26.10.0rc1
- CVE-2026-115775Twisted: Unauthenticated Remote Denial of Service in the Twisted words domish XML Element Stream via an Unbounded Element TreePyPI · twisted · fixed in 26.10.0rc1
- CVE-2026-115774Twisted: Denial of Service in the Twisted IMAP4 Server via a Negative Literal Size in SEARCHPyPI · twisted · fixed in 26.10.0rc1
- CVE-2026-115586virtualenv: Bash activator leaves the --prompt value unescaped in PS1 when promptvars is off, so prompt expansion later executes it (regression in 21.14.9)PyPI · virtualenv · fixed in 21.14.13
- CVE-2026-115585pypdf: Possible long runtimes for repeated malformed cross-reference entries (Follow-up)PyPI · pypdf · fixed in 6.21.2
- CVE-2026-115580pypdf: Possible long runtimes for large xref table header limitsPyPI · pypdf · fixed in 6.21.2
- CVE-2026-115572pypdf: Possible long runtimes for repeated references to the same missing objectPyPI · pypdf · fixed in 6.21.2
- CVE-2026-115570Electron: Mitigation for compromised eMudhra intermediate certificatesnpm · electron · fixed in 45.0.0-beta.6, 44.9.1, 43.8.1 and more
- CVE-2026-115569Fallow: Jest and Vitest `projects` entries let an analyzed repository make Fallow read files outside the project rootnpm · @fallow-cli/fallow-node, fallow · fixed in 3.34.0
- CVE-2026-115567Tokio: Race condition in `tokio::time::Interval`crates.io · tokio · fixed in 1.54.1
- CVE-2026-58497Uni-CLI: Legacy HTTP MCP transport accepted browser-originated localhost requestsnpm · @zenalexa/unicli · fixed in 0.225.2
- CVE-2026-115478obsidian-tc: Memory-lifecycle tools overwrite unowned notes or partially commit lifecycle changesnpm · obsidian-tc · fixed in 1.31.4
- CVE-2026-115477obsidian-tc: Declined human-in-the-loop confirmations can permit destructive calls over HTTPnpm · obsidian-tc · fixed in 1.31.4
- CVE-2026-57208Entire CLI: Path traversal in checkpoint session metadata allows arbitrary file write during resume/rewindGo · github.com/entireio/cli · fixed in 0.7.7
- CVE-2026-115754serialize-javascript 7.0.1 before 7.1.3 XSS via unescaped </script in function bodynpm · serialize-javascript · fixed in 7.1.3
- CVE-2026-115752Signal K Server 2.28.0-beta.2 before 2.34.0 SSRF via App Store appIconnpm · signalk-server · fixed in 2.34.0