Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-6357pip self-update functionality can import newly installed modules after wheel installationPyPI · pip · fixed in 26.1
- CVE-2026-40557Apache Storm Prometheus Reporter: Disabling TLS verification for Prometheus Reporter also disables it for all other connectionsMaven · org.apache.storm:storm-metrics-prometheus · fixed in 2.8.7
- CVE-2026-41081Apache Storm Client: Anonymous principal assigned on TLS client certificate verification failureMaven · org.apache.storm:storm-client · fixed in 2.8.7
- CVE-2026-27172Apache Camel: Unsafe Java deserialization in camel-consul ConsulRegistry allows arbitrary code execution via malicious values read from the Consul KV storeMaven · org.apache.camel:camel-consul · fixed in 4.14.6, 4.18.1
- CVE-2026-33453Apache Camel: CoAP URI Query Parameter to Exchange Header Injection in camel-coap Allows Single-Packet Pre-Auth Remote Code ExecutionMaven · org.apache.camel:camel-coap · fixed in 4.14.6, 4.18.1
- CVE-2026-33454Apache Camel: Inbound Header Filter Missing in MailHeaderFilterStrategy Allows Remote Code Execution via MIME Header Injection (CVE-2025-30177 Variant)Maven · org.apache.camel:camel-mail · fixed in 4.14.6, 4.18.1
- CVE-2026-40022Apache Camel Platform HTTP Main: Authentication Bypass on Non-Root Context Paths in camel main runtimeMaven · org.apache.camel:camel-platform-http-main · fixed in 4.14.6, 4.18.2, 4.20.0
- CVE-2026-40858Apache Camel: Camel-Infinispan: Unsafe Deserialization in Remote Aggregation RepositoryMaven · org.apache.camel:camel-infinispan · fixed in 4.14.7, 4.18.2, 4.20.0
- CVE-2026-41409Apache MINA: CWE-502 Deserialization of Untrusted DataMaven · org.apache.mina:mina-core · fixed in 2.0.28, 2.1.11, 2.2.6
- CVE-2026-41635Apache MINA: AbstractIoBuffer.resolveClass() null-clazz Branch Skips acceptMatchers Filter — Full Object Deserialization RCEMaven · org.apache.mina:mina-core · fixed in 2.0.28, 2.1.11, 2.2.6
- CVE-2026-40453Apache Camel JMS, Apache Camel CoAP, Apache Camel Google PubSub: Incomplete fix for CVE-2025-27636 in non-HTTP HeaderFilterStrategies (camel-jms, camel-sjms, camel-coap, camel-google-pubsub) allows case-variant header injectionMaven · org.apache.camel:camel-coap, org.apache.camel:camel-google-pubsub +2 · fixed in 4.14.6, 4.18.2, 4.20.0
- CVE-2026-40860Apache Camel: Unsafe Deserialization of JMS ObjectMessage in camel-jms, camel-sjms, camel-sjms2 and camel-amqpMaven · org.apache.camel:camel-activemq, org.apache.camel:camel-activemq6 +4 · fixed in 4.14.7, 4.18.2, 4.20.0
- CVE-2026-40048Apache Camel PQC: Unsafe Deserialization from FileBasedKeyLifecycleManagerMaven · org.apache.camel:camel-pqc · fixed in 4.20.0, 4.18.2
- CVE-2026-40473Apache Camel Mina: Unsafe Deserialization in MinaConverter.toObjectInput() via TCP/UDPMaven · org.apache.camel:camel-mina · fixed in 4.14.6, 4.18.2, 4.20.0
- CVE-2026-7045baomidou dynamic-datasource StandardEvaluationContext/SpelExpressionParser DsSpelExpressionProcessor.java DsSpelExpressionProcessor#doDetermineDatasource injectionMaven · com.baomidou:dynamic-datasource-spring
- CVE-2026-7020Ollama Tensor Model Transfer transfer.go digestToPath path traversalGo · github.com/ollama/ollama
- CVE-2026-42254Hickory DNS hickory-recursor 0.1 through 0.25.2 allows cross-zone poisoning because cached data is not directly associated with a query thatcrates.io · hickory-recursor · fixed in 0.26.0
- CVE-2026-6993go-kratos http.DefaultServeMux Fallback server.go NewServer confused deputyGo · github.com/go-kratos/kratos/v2
- CVE-2026-6987PicoClaw Web Launcher Management Plane restart command injectionGo · github.com/sipeed/picoclaw
- CVE-2026-6984AstrBotDevs AstrBot Dashboard API t2i.py create_template special elements used in a template enginePyPI · astrbot
- CVE-2026-6982star7th ShowDoc API Page Sort Endpoint PageController.class.PHP sql injectionPackagist · showdoc/showdoc · fixed in 3.8.1
- CVE-2026-6951Versions of the package simple-git before 3.36.0 are vulnerable to Remote Code Execution (RCE) due to an incomplete fix for [CVE-2022-25912]npm · simple-git · fixed in 3.36.0
- CVE-2026-41248Official Clerk JavaScript SDKs: Middleware-based route protection bypassnpm · @clerk/astro, @clerk/nextjs +2 · fixed in 1.5.7, 2.17.10, 3.0.15 and more
- CVE-2026-41488angchain-openai: Image token counting SSRF protection can be bypassed via DNS rebindingPyPI · langchain-openai · fixed in 1.1.14
- CVE-2026-41481LangChain: HTMLHeaderTextSplitter.split_text_from_url SSRF Redirect BypassPyPI · langchain-text-splitters · fixed in 1.1.2
- CVE-2026-41478Saltcorn: SQL Injection via Unparameterized Sync Endpoints (maxLoadedId)npm · @saltcorn/server · fixed in 1.4.6, 1.5.6, 1.6.0-beta.5
- CVE-2026-6967Missing Delegated Metadata Validation in awslabs/toughcrates.io · tough, tuftool · fixed in 0.22.0, 0.15.0
- CVE-2026-6966Signature Threshold Bypass in awslabs/tough Delegated Rolescrates.io · tough, tuftool · fixed in 0.22.0, 0.15.0
- CVE-2026-41433OpenTelemetry eBPF Instrumentation: Privileged Java agent injection allows arbitrary host file overwrite via untrusted TMPDIRGo · go.opentelemetry.io/obi · fixed in 0.8.0
- CVE-2026-41427Better Auth OAuth 2.1 Provider: Unprivileged users can register OAuth clientsnpm · @better-auth/oauth-provider · fixed in 1.6.5