Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-44641Microsoft APM: plugin.json component paths escape plugin root and copy arbitrary host files during installPyPI · apm-cli · fixed in 0.8.12
- CVE-2026-45773Turborepo: Login callback CSRF/session fixationnpm · turbo · fixed in 2.9.14
- CVE-2026-45772Turborepo: Unexpected local code execution during Yarn Berry detectionnpm · @turbo/codemod, @turbo/workspaces +1 · fixed in 2.9.14
- CVE-2026-35194Apache Flink: Remote code execution via SQL injection in code generationMaven · org.apache.flink:flink-table-api-java, org.apache.flink:flink-table-planner_2.12 +1 · fixed in 1.20.4, 2.0.2, 2.1.2 and more
- CVE-2026-45803gh: GitHub Actions log output in `gh run view` allows terminal escape sequence injectionGo · github.com/cli/cli, github.com/cli/cli/v2 · fixed in 2.92.0
- CVE-2026-45736ws: Uninitialized memory disclosurenpm · ws · fixed in 8.20.1
- CVE-2026-2652Authentication Bypass in mlflow/mlflowPyPI · mlflow · fixed in 3.11.0, 3.10.0
- CVE-2026-38728An issue in Nodemailer smtp_server before v.3.18.3 allows a remote attacker to cause a denial of service via the SMTPStream._write, lib/smtpnpm · smtp-server · fixed in 3.18.3
- CVE-2026-44671ZITADEL: LDAP Filter Injection in Login FlowGo · github.com/zitadel/zitadel · fixed in 4.15.0, 3.4.10
- CVE-2026-44428MCP Registry: GitHub OIDC tokens replayable across registry deployments due to shared audienceGo · github.com/modelcontextprotocol/registry · fixed in 1.7.6
- CVE-2026-44427MCP Registry: Open RedirectGo · github.com/modelcontextprotocol/registry · fixed in 1.7.5
- CVE-2026-44429MCP Registry: Stored XSS in catalogue UI via attribute-quote breakout in publisher-controlled `websiteUrl`Go · github.com/modelcontextprotocol/registry · fixed in 1.7.7
- CVE-2026-44430MCP Registry: Unauthenticated SSRF: HTTP namespace verification dials 6to4 / NAT64 / site-local IPv6 addresses, bypassing private-address allowlistGo · github.com/modelcontextprotocol/registry · fixed in 1.7.7
- CVE-2026-45781MCP Registry: OCI ownership validation fails open on upstream rate limits, allowing attacker-controlled package claimsGo · github.com/modelcontextprotocol/registry · fixed in 1.7.9
- CVE-2026-44212PrestaShop: Stored XSS executable in customer service viewPackagist · prestashop/prestashop · fixed in 8.2.6, 9.1.1
- CVE-2026-44662rust-openssl: Heap buffer overflow when encrypting with AES key-wrap-with-paddingcrates.io · openssl · fixed in 0.10.79
- CVE-2026-42327rust-openssl: undefined behavior in X509Ref::ocsp_responders for certificates with non-UTF-8 OCSP URLscrates.io · openssl · fixed in 0.10.79
- CVE-2026-45369python-utcp: Command Injection via Unsanitized Argument Substitution in CLI Communication ProtocolPyPI · utcp-cli · fixed in 1.1.2
- CVE-2026-45370python-utcp: Full Process Environment Exposed to CLI Subprocess - Secrets Leakage via Command InjectionPyPI · utcp-cli · fixed in 1.1.2
- CVE-2026-44661python-utcp: SSRF via attacker-controlled OpenAPI servers[0].url in HTTP communication protocolPyPI · utcp-http · fixed in 1.1.2
- CVE-2026-8597Missing integrity verification in Triton inference handler in Amazon SageMaker Python SDKPyPI · sagemaker · fixed in 2.257.2, 3.8.0
- CVE-2026-8596Cleartext storage of HMAC signing key in Amazon SageMaker Python SDK ModelBuilder/Serve pathPyPI · sagemaker · fixed in 2.257.2, 3.8.0
- CVE-2026-8634Crabbox < v0.12.0 Environment Variable Information DisclosureGo · github.com/openclaw/crabbox · fixed in 0.12.0
- CVE-2026-46356Fleet: IP spoofing allows bypassing API rate limitingGo · github.com/fleetdm/fleet/v4 · fixed in 4.80.1
- CVE-2026-26191Fleet vulnerable to OS command injection in software packagesGo · github.com/fleetdm/fleet/v4 · fixed in 4.81.1
- CVE-2026-26062Fleet server may terminate unexpectedly when handling certain gRPC requestsGo · github.com/fleetdm/fleet/v4 · fixed in 4.81.0
- CVE-2026-24899Fleet Windows MDM Azure AD JWT Authentication BypassGo · github.com/fleetdm/fleet/v4 · fixed in 4.82.0
- CVE-2026-24000Fleet has a rate limiting bypass via untrusted client IP headersGo · github.com/fleetdm/fleet/v4 · fixed in 4.80.1
- CVE-2026-23998Fleet has a Windows MDM management endpoint authentication bypassGo · github.com/fleetdm/fleet/v4 · fixed in 4.81.0
- CVE-2026-8621Crabbox < v0.12.0 Authentication Bypass via Header SpoofingGo · github.com/openclaw/crabbox · fixed in 0.12.0