Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-44522Note Mark: Arbitrary File Write via Path Traversal in Asset Names Leading to Remote Code ExecutionGo · github.com/enchant97/note-mark/backend · fixed in 0.0.0-20260501152243-db3f72bff780
- CVE-2026-27886Strapi may leak sensitive data via relational filtering due to lack of query sanitizationnpm · @strapi/strapi · fixed in 5.37.0
- CVE-2026-44523Note Mark: JWT Secret Weakness allows Full Account Takeover via token forgeryGo · github.com/enchant97/note-mark/backend · fixed in 0.0.0-20260501152247-18b587758667
- CVE-2026-22707Strapi Upload Plugin MIME Validation Bypass via Content APInpm · @strapi/upload · fixed in 5.33.3
- CVE-2026-22706Strapi: Password Reset Does Not Revoke Existing Refresh Sessionsnpm · @strapi/admin, @strapi/plugin-users-permissions · fixed in 5.33.3
- CVE-2026-22599Strapi Vulnerable to SQL Injection in Content Type Buildernpm · @strapi/content-type-builder, @strapi/plugin-content-type-builder · fixed in 5.33.2, 4.26.1
- CVE-2026-44589nuxt-og-image SSRF — bypass of GHSA-pqhr-mp3f-hrpp / v6.2.5 fix (IPv6 + redirect)npm · nuxt-og-image · fixed in 6.4.9
- CVE-2025-64526Strapi has a rate limit bypass on users-permissions plugin via attacker-controlled email keyingnpm · @strapi/plugin-users-permissions · fixed in 5.45.0
- CVE-2026-44670SiYuan: Stored XSS via Attribute View name to Electron renderer RCE in SiYuanGo · github.com/siyuan-note/siyuan/kernel · fixed in 0.0.0-20260512140701-d7b77d945e0d
- CVE-2026-44588SiYuan: URL-encoded title bypasses `escapeAriaLabel`, decoded by `decodeURIComponent` into a tooltip-XSSGo · github.com/siyuan-note/siyuan/kernel
- CVE-2026-45147SiYuan: Broken access control in SiYuan `/api/tag/getTag` — Reader role can mutate `Conf.Tag.Sort` and persist to diskGo · github.com/siyuan-note/siyuan/kernel · fixed in 0.0.0-20260512140701-d7b77d945e0d
- CVE-2026-45148SiYuan: Broken access control in SiYuan publish-mode Readers can enumerate metadataGo · github.com/siyuan-note/siyuan/kernel · fixed in 0.0.0-20260512140701-d7b77d945e0d
- CVE-2026-45371SiYuan: SiYuan publish-mode Reader can mutate Conf and SQL index via 8 ungated APIsGo · github.com/siyuan-note/siyuan/kernel · fixed in 0.0.0-20260512140701-d7b77d945e0d
- CVE-2026-45375SiYuan: Bazaar marketplace renders unescaped package `name` and `version` metadata, allowing stored XSS and Electron code executionGo · github.com/siyuan-note/siyuan/kernel
- CVE-2026-42334Mongoose: Improper Sanitization of $nor in sanitizeFilter May Allow NoSQL Injectionnpm · mongoose · fixed in 6.13.9, 7.8.9, 8.22.1 and more
- CVE-2026-44544gittuf: Policy can be rolled back to prior valid versionGo · github.com/gittuf/gittuf · fixed in 0.14.0
- CVE-2026-44542FileBrowser Quantum: Unauthenticated Path Traversal in Public Share Delete Allows Arbitrary File DeletionGo · github.com/gtsteffaniak/filebrowser · fixed in 0.0.0-20260501183844-112740bdd41d
- CVE-2026-44283etcd: Read access via PrevKv in etcd transactions may bypass RBAC authorization checksGo · go.etcd.io/etcd, go.etcd.io/etcd/server/v3 +1 · fixed in 3.4.44, 3.5.30, 3.6.11
- CVE-2026-42572Hatchet: Cross-tenant information disclosure in `listTasksByDAGIds`Go · github.com/hatchet-dev/hatchet · fixed in 0.83.39
- CVE-2026-44520Docling-Graph: SSRF via Missing Internal IP Validation in URLInputHandlerPyPI · docling-graph · fixed in 1.5.1
- CVE-2026-41888Distribution: Tag deletion bypasses `storage.delete.enabled` configurationGo · github.com/distribution/distribution, github.com/distribution/distribution/v3 · fixed in 3.1.1
- CVE-2026-44516Valtimo: Sensitive data exposure through HTTP request/response logging in LoggingRestClientCustomizerMaven · com.ritense.valtimo:web · fixed in 12.33.0, 13.26.0
- CVE-2026-42555Valtimo: SpEL injection via StandardEvaluationContext allows Remote Code Execution by admin usersMaven · com.ritense.valtimo:case, com.ritense.valtimo:contract +1 · fixed in 13.23.0, 12.32.0
- CVE-2026-44827Diffusers: None.py Trust Remote Code BypassPyPI · diffusers · fixed in 0.38.0
- CVE-2026-44513Diffusers: `trust_remote_code` bypass via `custom_pipeline` and local custom componentsPyPI · diffusers · fixed in 0.38.0
- CVE-2026-44514Kubetail: Cross-Site WebSocket Hijacking allows attacker to read Kubernetes logs from authenticated usersGo · github.com/kubetail-org/kubetail/modules/cli, github.com/kubetail-org/kubetail/modules/dashboard · fixed in 0.16.0, 0.14.0
- CVE-2026-44511Katalyst Koi: Session cookies can be replayed after user logoutRubyGems · katalyst-koi · fixed in 4.20.0, 5.6.0
- CVE-2026-44312css_parser allows to MITM included https css urlsRubyGems · css_parser · fixed in 2.1.0, 1.22.0
- CVE-2026-44503Kiota abstractions RedirectHandler leaks Cookie/Proxy-Authorization headers on cross-host redirectnpm · kiota-typescript · fixed in 1.0.0-preview.100
- CVE-2026-44504Aegra: Cross-user run injection in /threads/{thread_id}/runs (IDOR)PyPI · aegra-api · fixed in 0.9.7