Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-115730i18next-http-backend 4.0.2 Protocol-Relative URL Injection via Namespace in interpolateUrlnpm · i18next-http-backend · fixed in 4.0.3
- CVE-2026-115728@hapi/content 6.0.1 before 6.0.3 ReDoS via Content.disposition() Parameter Parsingnpm · @hapi/content · fixed in 6.0.1
- CVE-2026-57210Heimdall: IP Spoofing via Unvalidated Forwarding HeadersGo · github.com/dadrus/heimdall, https://github.com/dadrus/heimdall · fixed in 0.17.17
- CVE-2026-57209Heimdall: Forwarded Header Injection via Unsanitized Host Header in Proxy ModeGo · github.com/dadrus/heimdall · fixed in 0.17.17
- CVE-2026-54711PGHoard: Password written to debug logPyPI · pghoard
- CVE-2026-57117PraisonAI: Compute-bridged file tools allow shell command injectionPyPI · praisonai · fixed in 4.6.59
- CVE-2026-57121PraisonAI: Missing ownership check on DELETE endpoints allows members to delete others' content in Platform APIPyPI · praisonai-platform · fixed in 0.1.6
- CVE-2026-57116PraisonAI: AgentOS remains unauthenticated after GHSA-pm96 patched version and allows remote agent invocationPyPI · praisonai · fixed in 4.6.59
- CVE-2026-57114PraisonAI: Jobs webhook SSRF protection bypass via DNS rebindingPyPI · praisonai · fixed in 4.6.59
- CVE-2026-57113PraisonAI GitHub template cache path traversal allows outside-cache file write and directory deletionPyPI · praisonai · fixed in 4.6.59
- RUSTSEC-2026-0387Multiple timing variability issues in operations intended to be constant-timecrates.io · crypto-bigint · fixed in 0.7.6
- CVE-2026-56840PraisonAI: HTTPApproval dashboard renders tool arguments as raw HTML, allowing approval-page XSS to approve dangerous toolsPyPI · praisonai · fixed in 4.6.59
- CVE-2026-56838PraisonAI recipe.run_stream skips dangerous-tool policy enforcementPyPI · praisonai · fixed in 4.6.59
- CVE-2026-56837PraisonAI LinearBot processes unsigned webhooks when LINEAR_WEBHOOK_SECRET is missingPyPI · praisonai · fixed in 4.6.59
- CVE-2026-56836PraisonAI recipe serve Typer command bypasses the non-localhost authentication guardPyPI · praisonai · fixed in 4.6.59
- CVE-2026-56835PraisonAI Slack app_mention bypasses configured user/channel authorizationPyPI · praisonai · fixed in 4.6.59
- CVE-2026-56834PraisonAI dynamic-context artifact tools read arbitrary host files outside artifact storagePyPI · praisonai · fixed in 4.6.59
- CVE-2026-56833PraisonAI Dynamic Context history and terminal tools read files outside configured storage via path traversalPyPI · praisonai · fixed in 4.6.59
- CVE-2026-56832PraisonAI DiscordApproval accepts unrelated channel messages as dangerous-tool approvalsPyPI · praisonai · fixed in 4.6.59
- CVE-2026-107685WebSocket sessions do not verify TLS certificates, exposing API keys and OAuth tokens to on-path attackersHex · req_llm · fixed in 1.29.0
- CVE-2026-105963Secret key base exposed in stack trace arguments on wrong-typed Plug.Crypto argumentsHex · plug, plug_crypto · fixed in 1.7.0, 2.2.1
- CVE-2026-106763An issue in @justice8096/sagemath-mcp-server 1.0.1 allows a remote attacker to execute arbitrary code via the escapeShellString and…npm · @justice8096/sagemath-mcp-server
- CVE-2026-106764An issue in @rog0x/mcp-git-tools 1.0.1 allows a remote attacker to execute arbitrary code via the resolveBaseBranch function.npm · @rog0x/mcp-git-tools
- CVE-2026-106765An issue in @rog0x/mcp-docker-tools 1.0.1 allows a remote attacker to execute arbitrary code via the handleImageList function.npm · @rog0x/mcp-docker-tools
- CVE-2026-114620Authlib: Unvalidated request_uri fetch in JWT-secured authorization request (JAR) leading to SSRFPyPI · authlib · fixed in 1.9.0
- CVE-2026-114619Authlib: OpenID implicit grant checks raw scope instead of allowed scope before issuing ID tokensPyPI · authlib · fixed in 1.9.0
- CVE-2026-114618Authlib: Default JWT bearer grant accepts assertions for the wrong audiencePyPI · authlib · fixed in 1.9.0
- CVE-2026-114617Authlib: ID token can disable its own nonce validation via the nonce_supported claimPyPI · authlib · fixed in 1.9.0
- CVE-2026-114616Authlib accepts an empty HMAC key, allowing JWS/JWT signature forgery (HS256/HS384/HS512)PyPI · authlib · fixed in 1.9.1
- CVE-2026-114615Authlib incomplete algorithm-confusion fix permits HMAC forgery with prefixed public keysPyPI · authlib · fixed in 1.9.0