Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-43576OpenClaw < 2026.4.5 - Second-hop SSRF via CDP /json/version WebSocket URLnpm · openclaw · fixed in 2026.4.5
- CVE-2026-43575OpenClaw 2026.2.21 < 2026.4.10 - Authentication Bypass in Sandbox noVNC Helper Routenpm · openclaw · fixed in 2026.4.10
- CVE-2026-40171Jupyter Notebook and JupyterLab token theft via stored XSS in help command linkernpm · @jupyter-notebook/help-extension, @jupyterlab/help-extension · fixed in 7.5.6, 4.5.7
- CVE-2026-40076OpenMRS Core arbitrary file write and code execution via Zip Slip in module uploadMaven · org.openmrs.web:openmrs-web
- CVE-2026-33079Mistune ReDoS in LINK_TITLE_RE allows denial of service with crafted Markdown titlesPyPI · mistune · fixed in 3.2.1
- CVE-2026-29090Rucio SQL injection in postgres_meta DID search path compromises PostgreSQL metadata databasePyPI · rucio · fixed in 35.8.5, 38.5.5, 39.4.2 and more
- CVE-2026-29080Rucio SQL Injection in FilterEngine Oracle JSON Path via DID Search APIPyPI · rucio · fixed in 35.8.5, 38.5.5, 39.4.2 and more
- CVE-2026-23870A denial of service vulnerability could be triggered by sending specially crafted HTTP requests to server function endpoints, this could leanpm · react-server-dom-parcel, react-server-dom-turbopack +1 · fixed in 19.0.6, 19.1.7, 19.2.6
- CVE-2026-6863HTTP Filestore Endpoints Misapply Permissions Across OrganizationsGo · www.velocidex.com/golang/velociraptor · fixed in 0.76.4
- CVE-2026-8026FlowiseAI Flowise API Response account.service.ts login information disclosurenpm · flowise
- CVE-2026-6420Keylime: keylime: security bypass due to hardcoded tpm quote noncePyPI · keylime · fixed in 7.14.2
- CVE-2026-6860A TCP client can perform a TLS handshake and present the server name extension with a server name that is accepted by a server wildcard nameMaven · io.vertx:vertx-core · fixed in 4.5.27, 5.0.12
- CVE-2026-40010Apache Wicket: possible session fixation using AuthenticatedWebSessionMaven · org.apache.wicket:wicket-auth-roles · fixed in 10.9.0
- CVE-2026-42509Apache Wicket: crafted strings can break out of the JavaScript sequenceMaven · org.apache.wicket:wicket-parent · fixed in 10.9.0
- CVE-2026-43646Apache Wicket: crafted URLs can bypass PackageResourceGuardMaven · org.apache.wicket:wicket-parent · fixed in 10.9.0
- CVE-2026-43975Apache Wicket: Possible malicious path traversal in FolderUploadsFileManagerMaven · org.apache.wicket:wicket-core · fixed in 10.9.0
- CVE-2026-7572Velociraptor EVTX Parser — Process Crash via Crafted .evtx FileGo · www.velocidex.com/golang/velociraptor · fixed in 0.76.5
- CVE-2026-7573GetUserRoles API endpoint allows any authenticated user to enumerate ACL policies across all organizationsGo · www.velocidex.com/golang/velociraptor · fixed in 0.76.5
- CVE-2026-44405In Paramiko through 4.0.0 before a448945, rsakey.py allows the SHA-1 algorithm.PyPI · paramiko
- CVE-2026-40934jupyter-server authentication cookies remain valid after password reset due to static cookie secretPyPI · jupyter-server · fixed in 2.18.0
- CVE-2026-40110jupyter-server CORS origin validation bypass via unanchored regex in allow_origin_patPyPI · jupyter-server · fixed in 2.18.0
- CVE-2026-40075OpenMRS Core arbitrary file read via path traversal in ModuleResourcesServletMaven · org.openmrs.web:openmrs-web · fixed in 2.8.6
- CVE-2026-39852Quarkus authorization bypass via semicolon path normalization inconsistencyMaven · io.quarkus:quarkus-vertx-http · fixed in 3.20.6.1, 3.27.3.1, 3.33.1.1 and more
- CVE-2026-40068Claude Code arbitrary code execution via git worktree commondir trust dialog bypassnpm · @anthropic-ai/claude-code · fixed in 2.1.84
- CVE-2026-39383Gotenberg unauthenticated blind SSRF via unfiltered webhook URLGo · github.com/gotenberg/gotenberg/v7, github.com/gotenberg/gotenberg/v8 · fixed in 8.31.0
- CVE-2026-35579CoreDNS TSIG authentication bypass on gRPC, QUIC, DoH, and DoH3 transportsGo · github.com/coredns/coredns · fixed in 1.14.3
- CVE-2026-35527Incus blind SSRF via image import preflight HEAD requestGo · github.com/lxc/incus, github.com/lxc/incus/v6 +2 · fixed in 7.0.0
- CVE-2026-40280Gotenberg SSRF via case-insensitive URL scheme bypass in webhook and downloadFrom deny-listsGo · github.com/gotenberg/gotenberg/v7, github.com/gotenberg/gotenberg/v8 · fixed in 8.31.0
- CVE-2026-35453PhpSpreadsheet XSS via number format text substitution in HTML WriterPackagist · phpoffice/phpspreadsheet · fixed in 5.7.0, 3.10.5, 2.4.5 and more
- CVE-2026-35397jupyter-server path traversal allows access to sibling directories sharing root_dir name prefixPyPI · jupyter-server · fixed in 2.18.0