Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-42581Netty: HTTP/1.0 TE+CL Coexistence Bypasses Smuggling SanitizationMaven · io.netty:netty-codec-http · fixed in 4.2.13.Final, 4.1.133.Final
- CVE-2026-44005vm2: Sandbox escapenpm · vm2 · fixed in 3.11.0
- CVE-2026-45411vm2: Sandbox Breakout Using Async Generatornpm · vm2 · fixed in 3.11.3
- CVE-2026-44009vm2: Sandbox Breakout Through Null Proto Exceptionnpm · vm2 · fixed in 3.11.2
- CVE-2026-44008vm2 has sandbox breakout via `neutralizeArraySpeciesBatch`npm · vm2 · fixed in 3.11.2
- CVE-2026-44007vm2: nesting: true bypasses require: false, allowing sandbox escape to arbitrary OS command executionnpm · vm2 · fixed in 3.11.1
- CVE-2026-44006vm2: Sandbox Escapenpm · vm2 · fixed in 3.11.0
- CVE-2026-44004vm2: Host Process OOM DoS via Buffer.alloc (Timeout Bypass)npm · vm2 · fixed in 3.11.0
- CVE-2026-44003vm2: Transformer Fast-Path Bypass Exposes Internal State Variablenpm · vm2 · fixed in 3.11.0
- CVE-2026-44002vm2: Host File Path Disclosure via Stack Trace Information Leaknpm · vm2 · fixed in 3.11.0
- CVE-2026-44001vm2: Sandbox Escape via Promise Constructor Unhandled Rejection (Process Crash DoS)npm · vm2 · fixed in 3.11.0
- CVE-2026-44000vm2: sandbox boundary bypass via host Promise resolution preserving host object identitynpm · vm2 · fixed in 3.11.0
- CVE-2026-43999vm2: NodeVM builtin allowlist bypass via `module` builtin's `Module._load` allows sandbox escapenpm · vm2 · fixed in 3.11.0
- CVE-2026-43998vm2: NodeVM require.root bypass via symlink traversal allows sandbox escapenpm · vm2 · fixed in 3.11.0
- CVE-2026-43997vm2: Sandbox Escapenpm · vm2 · fixed in 3.11.0
- CVE-2026-45109Next.js: Middleware / Proxy bypass in App Router applications via segment-prefetch routesnpm · next · fixed in 15.5.18, 16.2.6
- CVE-2026-44582Next.js: Cache poisoning via collisions in React Server Component cache-bustingnpm · next · fixed in 15.5.16, 16.2.5
- CVE-2026-44581Next.js: Cross-site scripting in App Router applications using CSP noncesnpm · next · fixed in 15.5.16, 16.2.5
- CVE-2026-44580Next.js: Cross-site scripting in beforeInteractive scripts with untrusted inputnpm · next · fixed in 15.5.16, 16.2.5
- CVE-2026-44579Next.js: Denial of Service via connection exhaustion in applications using Cache Componentsnpm · next · fixed in 15.5.16, 16.2.5
- CVE-2026-44578Next.js: Server-side request forgery in applications using WebSocket upgradesnpm · next · fixed in 15.5.16, 16.2.5
- CVE-2026-44577Next.js: Denial of Service in the Image Optimization APInpm · next · fixed in 15.5.16, 16.2.5
- CVE-2026-44576Next.js: Cache poisoning in React Server Component responsesnpm · next · fixed in 15.5.16, 16.2.5
- CVE-2026-44574Next.js: Middleware / Proxy bypass through dynamic route parameter injectionnpm · next · fixed in 15.5.16, 16.2.5
- CVE-2026-44575Next.js: Middleware / Proxy bypass in App Router applications via segment-prefetch routesnpm · next · fixed in 15.5.16, 16.2.5
- CVE-2026-44573Next.js: Middleware / Proxy bypass in Pages Router applications using i18nnpm · next · fixed in 15.5.16, 16.2.5
- CVE-2026-44572Next.js: Middleware / Proxy redirects can be cache-poisonednpm · next · fixed in 15.5.16, 16.2.5
- CVE-2026-45028Astro: Server island encrypted parameters vulnerable to cross-component replaynpm · astro · fixed in 6.1.10
- CVE-2026-45033GitHub Copilot CLI: Nested Bare Repository Can Execute Arbitrary Commands via core.fsmonitornpm · @github/copilot · fixed in 1.0.43
- CVE-2026-44479Vercel: Non-interactive mode includes CLI arguments in suggested command outputnpm · vercel · fixed in 52.0.1