Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-40682Apache OpenNLP: XXE via Dictionary Parsing in DictionaryEntryPersistorMaven · org.apache.opennlp:opennlp-tools · fixed in 2.5.9, 3.0.0-M3, 1.9.5
- CVE-2026-42078PPTAgent: Arbitrary File Write + Directory Creation via markdown_table_to_imagePyPI · pptagent · fixed in 1.1.36
- CVE-2026-42077Evolver: Prototype Pollution via `Object.assign()` in mailbox store operationsnpm · @evomap/evolver · fixed in 1.69.3
- CVE-2026-42076Evolver: Command Injection via `execSync` in `_extractLLM()` function allows Remote Code Executionnpm · @evomap/evolver · fixed in 1.69.3
- CVE-2026-42810Apache Polaris: could broaden vended S3 credentials through wildcard-bearing namespace or table namesMaven · org.apache.polaris:polaris-core · fixed in 1.4.1
- CVE-2026-42075Evolver: Path Traversal via `--out` flag in `fetch` command allows Arbitrary File Writenpm · @evomap/evolver · fixed in 1.69.3
- CVE-2026-42027Apache OpenNLP: Arbitrary Class Instantiation via Model Manifest in ExtensionLoaderMaven · org.apache.opennlp:opennlp-tools · fixed in 2.5.9, 3.0.0-M3, 1.9.5
- CVE-2026-42440Apache OpenNLP: OOM DoS via Unbounded Array Allocation in AbstractModelReaderMaven · org.apache.opennlp:opennlp-tools · fixed in 2.5.9, 3.0.0-M3, 1.9.5
- CVE-2026-26956vm2: WASM Sandbox Escape (Node 25 only)npm · vm2 · fixed in 3.10.5
- CVE-2026-42811Apache Polaris: could broaden vended GCS credentials through unescaped identifier content in access-boundary CEL conditionsMaven · org.apache.polaris:polaris-core · fixed in 1.4.1
- CVE-2026-26332vm2: Sandbox Escapenpm · vm2 · fixed in 3.11.0
- CVE-2026-24781vm2: Sandbox Breakout Through Inspectnpm · vm2 · fixed in 3.11.0
- CVE-2026-24120vm2: Sandbox Breakout Through Promise Speciesnpm · vm2 · fixed in 3.10.5
- CVE-2026-24118VM2 Sandbox Breakout Through lookupGetternpm · vm2 · fixed in 3.11.0
- CVE-2026-42809Apache Polaris: staged table creation could vend storage credentials for unvalidated locationsMaven · org.apache.polaris:polaris-runtime-service · fixed in 1.4.1
- CVE-2026-42812Apache Polaris: No protection on `write.metadata.path`Maven · org.apache.polaris:polaris-runtime-service · fixed in 1.4.1
- CVE-2026-40563Apache Atlas: Script injection allows access to unintended dataMaven · org.apache.atlas:apache-atlas · fixed in 2.5.0
- CVE-2026-6501Improper restriction of XML external entity reference vulnerability in ILM Informatique jOpenDocument allows Data Serialization External EntMaven · org.jopendocument:jopendocument
- CVE-2026-7482Ollama heap out-of-bounds read in GGUF tensor parsing leaks server process memory to unauthenticated remote attackersGo · github.com/ollama/ollama · fixed in 0.17.1
- CVE-2026-7738puchunjie doc-tools-mcp MCP mcp-server.ts open_document path traversalnpm · @puchunjie/doc-tools-mcp
- CVE-2026-7737osrg GoBGP BMP Parser bmp.go BMPStatisticsReport.ParseBody out-of-boundsGo · github.com/osrg/gobgp, github.com/osrg/gobgp/v4 · fixed in 4.4.0
- CVE-2026-29199phpBB before 3.3.16 is vulnerable to Host Header Injection that can lead to password rest link poisoning.Packagist · phpbb/phpbb · fixed in 3.3.16, 4.0.0-a2
- CVE-2026-7736osrg GoBGP mrt.go parseRibEntry integer underflowGo · github.com/osrg/gobgp/v4 · fixed in 4.4.0
- CVE-2026-7734osrg GoBGP SRv6 L3 Service prefix_sid.go SRv6L3ServiceAttribute.DecodeFromBytes denial of serviceGo · github.com/osrg/gobgp/v4 · fixed in 4.4.0
- CVE-2026-7733funadmin Frontend Chunked Upload Endpoint UploadService.php chunkUpload unrestricted uploadPackagist · funadmin/funadmin
- CVE-2026-7725PrefectHQ prefect GitRepository Pull storage.py argument injectionPyPI · prefect · fixed in 3.6.25.dev7
- CVE-2026-7724PrefectHQ prefect Webhook/Notification validate_restricted_url toctouPyPI · prefect · fixed in 3.6.28.dev2
- CVE-2026-7723PrefectHQ prefect WebSocket Endpoint in missing authenticationPyPI · prefect · fixed in 3.6.14
- CVE-2026-7722PrefectHQ prefect Health Check API health endswith improper authenticationPyPI · prefect · fixed in 3.6.22
- CVE-2025-67796IKUS Rdiffweb before 2.10.5 has an improper authorization flaw that allows an attacker with any valid or stolen access token to act as otherPyPI · rdiffweb · fixed in 2.10.6