Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-41693i18next-fs-backend: Path traversal via unsanitised lng/ns allows arbitrary file read/overwritenpm · i18next-fs-backend · fixed in 2.6.4
- CVE-2026-41883OmniFaces: EL injection via crafted resource name in wildcard CDN mappingMaven · org.omnifaces:omnifaces · fixed in 1.14.2, 2.7.32, 3.14.16 and more
- CVE-2026-42353Path traversal / SSRF in i18next-http-middleware via user-controlled language and namespace parametersnpm · i18next-http-middleware · fixed in 3.9.3
- CVE-2026-41683HTTP response splitting and DoS in i18next-http-middleware via unsanitised Content-Language headernpm · i18next-http-middleware · fixed in 3.9.3
- CVE-2026-41690Prototype pollution and path traversal in i18next-http-middleware via user-controlled language and namespace parametersnpm · i18next-http-middleware · fixed in 3.9.3
- CVE-2026-41591Marko: XSS via case-insensitive script/style closing tag bypass in runtime HTML escapingnpm · @marko/runtime-tags, marko · fixed in 6.0.164, 5.38.36
- CVE-2026-41070openvpn-auth-oauth2 returns FUNC_SUCCESS on client-deny, allowing unauthenticated VPN accessGo · github.com/jkroepke/openvpn-auth-oauth2 · fixed in 1.27.3
- CVE-2026-44499ZEBRA: Permanent Block Discovery Halt via Gossip Queue Saturation and Syncer Poisoningcrates.io · zebrad · fixed in 4.4.0
- CVE-2026-44500ZEBRA: Allocation Amplification in Inbound Network Deserializerscrates.io · zebra-chain, zebra-network +1 · fixed in 7.0.0, 6.0.0, 4.4.0
- CVE-2026-44498ZEBRA: Block Validator Undercounts Coinbase and P2SH Sigopscrates.io · zebrad · fixed in 4.4.0
- CVE-2026-44497ZEBRA: Consensus Divergence in Transparent Sighash Hash-Type Handling due to Stale Buffercrates.io · zebra-script, zebrad · fixed in 6.0.0, 4.4.0
- CVE-2026-41585ZEBRA: Denial of Service via Interrupted JSON-RPC Requests from Authenticated Clientscrates.io · zebra-rpc, zebrad · fixed in 6.0.2, 4.3.1
- CVE-2026-41584ZEBRA: rk Identity Point Panic in Transaction Verificationcrates.io · zebra-chain, zebrad · fixed in 6.0.2, 4.3.1
- CVE-2026-41583ZEBRA: Consensus Divergence in Transparent Sighash Hash-Type Handlingcrates.io · zebra-script, zebrad · fixed in 5.0.2, 4.3.1
- CVE-2026-41574Nhost Vulnerable to Account Takeover via OAuth Email Verification BypassGo · github.com/nhost/nhost · fixed in 0.0.0-20260417112436-ec8dab3f2cf4
- CVE-2026-41570PHPUnit: Argument injection via newline in PHP INI values forwarded to child processesPackagist · phpunit/phpunit · fixed in 12.5.22, 13.1.6
- CVE-2026-41507Remote Code Execution (RCE) via String Literal Injection into math-codegennpm · math-codegen · fixed in 0.4.3
- CVE-2026-41506go-git Credential leak via cross-host redirect in smart HTTP transportGo · github.com/go-git/go-git/v5, github.com/go-git/go-git/v6 · fixed in 5.18.0, 6.0.0-alpha.2
- CVE-2026-44340PraisonAI: Symlink-extraction bypass of `_safe_extractall` writes outside `dest_dir`PyPI · praisonai · fixed in 4.6.37
- CVE-2026-39816Apache NiFi: Missing Execute Code Required Permission on TinkerpopClientServiceMaven · org.apache.nifi:nifi-other-graph-services-nar · fixed in 2.9.0
- CVE-2026-44339PraisonAI has unsafe tool resolution in `ToolExecutionMixin.execute_tool`: undeclared `__main__` callables executePyPI · praisonai, praisonaiagents · fixed in 4.6.37, 1.6.37
- CVE-2026-44338PraisonAI ships and generates a legacy API server with authentication disabled by default, allowing unauthenticated workflow executionPyPI · praisonai · fixed in 4.6.34
- CVE-2026-44337PraisonAI knowledge-store backends interpolate unvalidated collection names into SQL and CQL queriesPyPI · praisonai · fixed in 4.6.34
- CVE-2026-44336PraisonAI MCP `tools/call` path-traversal and RCE via Python `.pth` injectionPyPI · praisonai · fixed in 4.6.34
- CVE-2026-44335SSRF bypass in PraisonAIPyPI · praisonaiagents · fixed in 1.6.32
- CVE-2026-44334PraisonAI: Unauthenticated RCE via `tool_override.py`PyPI · praisonai · fixed in 4.6.32
- CVE-2026-41497Incomplete fix for CVE-2026-34935: Command Injection in MervinPraison/PraisonAIPyPI · praisonai · fixed in 4.5.149
- CVE-2026-41496PraisonAI: SQL Injection via unvalidated `table_prefix` in 9 conversation store backends (incomplete fix for CVE-2026-40315)PyPI · praisonai, praisonaiagents · fixed in 4.5.149, 1.6.8
- CVE-2026-41493yard: Possible arbitrary path traversal and file access via yard serverRubyGems · yard · fixed in 0.9.42
- CVE-2026-41491Dapr: Service Invocation path traversal ACL bypassGo · github.com/dapr/dapr · fixed in 1.17.5, 1.16.14, 1.15.14