Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-42235n8n: XSS via MCP OAuth clientnpm · n8n · fixed in 1.123.32, 2.18.1, 2.17.4
- CVE-2026-42234n8n: Python Task Runner Sandbox Escapenpm · n8n · fixed in 1.123.32, 2.18.1, 2.17.4
- CVE-2026-42233n8n: SQL Injection in Oracle Database Node via Limit Fieldnpm · n8n · fixed in 1.123.32, 2.18.1, 2.17.4
- CVE-2026-42232n8n: XML Node Prototype Pollution to RCEnpm · n8n · fixed in 2.18.1, 2.17.4, 1.123.32
- CVE-2026-42231n8n: Prototype Pollution in XML Webhook Body Parser Leads to RCEnpm · n8n · fixed in 1.123.32, 2.18.1, 2.17.4
- CVE-2026-42230n8n: Open Redirect in MCP OAuth Consent Flownpm · n8n · fixed in 1.123.32, 2.18.1, 2.17.4
- CVE-2026-42229n8n: SQL Injection in SeaTable Nodenpm · n8n · fixed in 1.123.32, 2.18.1, 2.17.4
- CVE-2026-42228n8n: Hijacking of Unauthenticated Chat Executionnpm · n8n · fixed in 1.123.32, 2.18.1, 2.17.4
- CVE-2026-42227n8n: Public API Variables IDOR Allows Cross-Project Secret Disclosurenpm · n8n · fixed in 1.123.32, 2.18.1, 2.17.4
- CVE-2026-42226n8n: Credential Authorization Bypass in dynamic-node-parameters Allows Foreign API Key Replaynpm · n8n · fixed in 2.17.5, 1.123.33
- CVE-2026-42154Prometheus: remote read endpoint allows denial of service via crafted snappy payloadGo · github.com/prometheus/prometheus, github.com/prometheus/prometheus/v2 · fixed in 0.305.2, 0.311.3
- CVE-2026-42151Prometheus Azure AD remote write OAuth client secret exposed via config APIGo · github.com/prometheus/prometheus · fixed in 0.311.3
- CVE-2026-41572Note Mark: Unauthenticated read of notes and assets in soft-deleted public booksGo · github.com/enchant97/note-mark/backend · fixed in 0.0.0-20260417132843-d1bf845a2a2d
- CVE-2026-41571Note Mark: OIDC-registered users authenticated by submitting password "null"Go · github.com/enchant97/note-mark/backend · fixed in 0.0.0-20260417132909-dea5530cc989
- CVE-2026-42140Server-Side Request Forgery (SSRF) in PlantUML Macro via 'server' parameterMaven · org.xwiki.contrib.plantuml:macro-plantuml-macro · fixed in 2.4.1
- CVE-2026-42091goshs has Cross-Origin Arbitrary File Write via Missing CSRF on PUT and Wildcard CORSGo · github.com/patrickhener/goshs, github.com/patrickhener/goshs/v2 +2 · fixed in 2.0.2
- CVE-2026-42088OpenC3 COSMOS: Administrative Actions via the Script Runner ToolPyPI · openc3 · fixed in 7.0.0
- CVE-2026-42087OpenC3 COSMOS: SQL Injection in QuestDB Time-Series Data BasePyPI · openc3 · fixed in 7.0.0
- CVE-2026-42086OpenC3 COSMOS: Self-XSS in the Command SenderPyPI · openc3 · fixed in 7.0.0
- CVE-2026-42085OpenC3 COSMOS: Arbitrary write to plugins directory via path-traversed config filenamesPyPI · openc3 · fixed in 6.10.5
- CVE-2026-42084OpenC3 COSMOS: Hijacked session token can be used to reset password for persistencePyPI · openc3 · fixed in 6.10.5
- CVE-2026-42052beets is Vulnerable to XSSPyPI · beets · fixed in 2.10.0
- CVE-2026-42080PPTAgent: Arbitrary File Write via `save_generated_slides`PyPI · pptagent · fixed in 1.1.36
- CVE-2026-42079PPTAgent: Arbitrary Code Execution via Python eval() of LLM-Generated Code with Builtins in ScopePyPI · pptagent · fixed in 1.1.36
- CVE-2026-40682Apache OpenNLP: XXE via Dictionary Parsing in DictionaryEntryPersistorMaven · org.apache.opennlp:opennlp-tools · fixed in 2.5.9, 3.0.0-M3, 1.9.5
- CVE-2026-42078PPTAgent: Arbitrary File Write + Directory Creation via markdown_table_to_imagePyPI · pptagent · fixed in 1.1.36
- CVE-2026-42077Evolver: Prototype Pollution via `Object.assign()` in mailbox store operationsnpm · @evomap/evolver · fixed in 1.69.3
- CVE-2026-42076Evolver: Command Injection via `execSync` in `_extractLLM()` function allows Remote Code Executionnpm · @evomap/evolver · fixed in 1.69.3
- CVE-2026-42810Apache Polaris: could broaden vended S3 credentials through wildcard-bearing namespace or table namesMaven · org.apache.polaris:polaris-core · fixed in 1.4.1
- CVE-2026-42075Evolver: Path Traversal via `--out` flag in `fetch` command allows Arbitrary File Writenpm · @evomap/evolver · fixed in 1.69.3