Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-42844Grav: Low-privileged API users can create super-admin accounts via blueprint-uploadPackagist · getgrav/grav · fixed in 2.0.0-beta.4
- CVE-2026-44301Hugo: Node tool execution allows file system access outside the project directoryGo · github.com/gohugoio/hugo · fixed in 0.161.0
- CVE-2026-44302Snappier: Infinite loop in SnappyStream decompression on malformed framed inputNuGet · snappier · fixed in 1.3.1
- CVE-2026-44306Statamic: Email enumeration via forgot password endpointPackagist · statamic/cms · fixed in 5.73.21, 6.15.0
- CVE-2026-44305Lemur: LDAP TLS certificate verification globally disabled enables credential interceptionPyPI · lemur · fixed in 1.9.0
- CVE-2026-44304Lemur: LDAP Filter Injection enables post-authentication privilege escalationPyPI · lemur · fixed in 1.9.0
- CVE-2026-44241Micronaut Framework: Unbounded formattersCache in TimeConverterRegistrar Allows Memory Exhaustion via Accept-Language HeaderMaven · io.micronaut:micronaut-context · fixed in 4.10.22, 3.10.6, 3.8.14
- CVE-2026-44242Micronaut Framework: Unbounded bundleCache in ResourceBundleMessageSource Allows Memory Exhaustion via Accept-Language HeaderMaven · io.micronaut:micronaut-inject · fixed in 4.10.22, 3.10.6, 3.8.14
- CVE-2026-42196django-s3file: Relative path traversalPyPI · django-s3file · fixed in 7.0.2
- CVE-2026-44262Scramble: Remote code execution via evaluation of user-controlled input in validation rulesPackagist · dedoc/scramble · fixed in 0.13.22
- CVE-2026-44015Nginx UI: Server-Side Request Forgery (SSRF) via Cluster Proxy Middleware Allows Access to Internal ServicesGo · github.com/0xjacky/nginx-ui
- CVE-2026-43948wger: cross-tenant password reset and plaintext disclosure via gym=None bypassPyPI · wger · fixed in 2.6
- CVE-2026-44240basic-ftp allows a malicious FTP server to cause client-side denial of service via unbounded multiline control response bufferingnpm · basic-ftp · fixed in 5.3.1
- CVE-2026-44232dssrf: every IPv6 category bypasses is_url_safenpm · dssrf · fixed in 1.0.3
- CVE-2026-44011Craft CMS: Potential authenticated Remote Code Execution via malicious attached BehaviorPackagist · craftcms/cms · fixed in 4.17.12, 5.9.18
- CVE-2026-44012Craft CMS: Missing Volume Permission Check in AssetsController::actionShowInFolder Allows Information DisclosurePackagist · craftcms/cms · fixed in 5.9.18
- CVE-2026-44010Craft CMS: Missing Authorization in GraphQL Address Resolver Allows Cross-Scope PII DisclosurePackagist · craftcms/cms · fixed in 5.9.18, 4.17.12
- CVE-2026-44223vLLM: extract_hidden_states speculative decoding crashes server on any request with penalty parametersPyPI · vllm · fixed in 0.20.0
- CVE-2026-44222vLLM: Remote DoS via Special-Token PlaceholdersPyPI · vllm · fixed in 0.20.0
- CVE-2026-44221ArcadeDB: Cross-database authorization bypass and unsecured newly-created databasesMaven · com.arcadedb:arcadedb-server · fixed in 26.4.2
- CVE-2026-44217sse-channel: SSE Injection via unsanitized event fieldsnpm · sse-channel · fixed in 4.0.1
- CVE-2026-42338ip-address: XSS in Address6 HTML-emitting methodsnpm · ip-address · fixed in 10.1.1
- CVE-2026-44219ciguard: SCA HTTP client reads response body without size capPyPI · ciguard · fixed in 0.8.2
- CVE-2026-44218ciguard: Container image runs as root (no USER directive)PyPI · ciguard · fixed in 0.8.2
- CVE-2026-44220ciguard: discover_pipeline_files follows symlinks out of scan rootPyPI · ciguard · fixed in 0.8.2
- CVE-2026-42191OpenTelemetry.Exporter.OpenTelemetryProtocol: Disk retry default temp path enables local blob injection for OTLP ExporterNuGet · opentelemetry.exporter.opentelemetryprotocol · fixed in 1.15.3
- CVE-2026-7474Nomad vulnerable to path traversal in dynamic host volume which may lead to code executionGo · github.com/hashicorp/nomad · fixed in 1.11.0-rc.1.0.20260511152149-cd7240c4099a
- CVE-2026-8052Nomad's exec2 task driver vulnerable to arbitrary file read/write on client host through symlink attackGo · github.com/hashicorp/nomad-driver-exec2 · fixed in 0.1.2
- CVE-2026-6959Nomad vulnerable to arbitrary file read/write on client host through symlink attackGo · github.com/hashicorp/nomad · fixed in 1.11.0-rc.1.0.20260512123500-2a09fd62c238
- CVE-2026-42348OpAMP client reads unbounded HTTP response bodiesNuGet · opentelemetry.opamp.client · fixed in 0.2.0-alpha.1