Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-41322@astrojs/node: Cache Poisoning due to incorrect error handling when if-match header is malformednpm · @astrojs/node · fixed in 10.0.5
- CVE-2026-41321@astrojs/cloudflare: SSRF via redirect following in Cloudflare image-binding-transform endpointnpm · @astrojs/cloudflare · fixed in 13.1.10
- CVE-2026-41067Astro: XSS via incomplete `</script>` sanitization in `define:vars` allows case-insensitive and whitespace-based bypassnpm · astro · fixed in 6.1.6
- CVE-2026-40897Math.js: Unsafe object property setter in mathjsnpm · mathjs · fixed in 15.2.0
- CVE-2026-41066lxml: Default configuration of iterparse() and ETCompatXMLParser() allows XXE to local filesPyPI · lxml · fixed in 6.1.0
- CVE-2026-25660Authentication bypass for certain API callsPyPI · codechecker
- CVE-2026-38743Apache Airflow: Dags endpoint might provide access to otherwise inaccessible entitiesPyPI · apache-airflow, apache-airflow-core · fixed in 3.0.0, 3.2.1rc1, 3.2.1
- CVE-2026-40690Apache Airflow: Assets graph view bypasses DAG level access control displaying unrelated topologies and all DAGs names to unauthorized usersPyPI · apache-airflow, apache-airflow-core · fixed in 3.0.0, 3.2.1rc1, 3.2.1
- CVE-2026-23902Apache DolphinScheduler: Users are able to use tenants that are not defined on the platform during workflow execution.Maven · org.apache.dolphinscheduler:dolphinscheduler · fixed in 3.4.1
- CVE-2025-62233Apache DolphinScheduler: Deserialization of untrusted data in RPCMaven · org.apache.dolphinscheduler:dolphinscheduler, org.apache.dolphinscheduler:dolphinscheduler-rpc · fixed in 3.3.1
- CVE-2026-41044Apache ActiveMQ, Apache ActiveMQ Broker, Apache ActiveMQ All: Authenticated user can perform RCE via DestinationView MBean exposed by JolokiaMaven · org.apache.activemq:activemq-all, org.apache.activemq:activemq-broker +1 · fixed in 5.19.6, 6.2.5
- CVE-2026-41043Apache ActiveMQ, Apache ActiveMQ Web: ActiveMQ Web Console - XSS vulnerability when browsing queuesMaven · org.apache.activemq:activemq-all, org.apache.activemq:activemq-broker +1 · fixed in 5.19.6, 6.2.5
- CVE-2026-40466Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Possible bypass of CVE-2026-34197 via HTTP discovery second-stage URIMaven · org.apache.activemq:activemq-all, org.apache.activemq:activemq-broker +1 · fixed in 5.19.6, 6.2.5
- CVE-2026-21728Tempo query limit results in unbounded memory allocationGo · github.com/grafana/tempo · fixed in 2.8.4, 2.9.2, 2.10.2
- CVE-2026-41324basic-ftp vulnerable to denial of service via unbounded memory consumption in Client.list()npm · basic-ftp · fixed in 5.3.0
- CVE-2026-41485Kyverno Controller Denial of Service via forEach Mutation PanicGo · github.com/kyverno/kyverno · fixed in 1.16.4, 1.17.2
- CVE-2026-41323Kyverno: ServiceAccount token leaked to external servers via apiCall service URLGo · github.com/kyverno/kyverno · fixed in 1.17.0
- CVE-2026-41068Kyverno: Cross-Namespace Read Bypasses RBAC Isolation (CVE-2026-22039 Incomplete Fix)Go · github.com/kyverno/kyverno
- CVE-2026-41319MailKit has STARTTLS Response Injection via unflushed stream buffer that enables SASL mechanism downgradeNuGet · mailkit · fixed in 4.16.0
- CVE-2026-41316ERB has an @_init deserialization guard bypass via def_module / def_method / def_classRubyGems · erb · fixed in 4.0.3.1, 4.0.4.1, 6.0.1.1 and more
- CVE-2026-41305PostCSS has XSS via Unescaped </style> in its CSS Stringify Outputnpm · postcss · fixed in 8.5.10
- CVE-2026-33318Actual has Privilege Escalation via 'change-password' Endpoint on OpenID-Migrated Serversnpm · @actual-app/sync-server · fixed in 26.4.0
- CVE-2026-32952go-ntlmssp NTLM challenges can panic on malformed payloadsGo · github.com/azure/go-ntlmssp · fixed in 0.1.1
- CVE-2026-41325Kirby is vulnerable to authorization bypass during page, file and user creation via blueprint injectionPackagist · getkirby/cms · fixed in 4.9.0, 5.4.0
- CVE-2026-40099Kirby's page creation API bypasses the changeStatus permission check via unfiltered isDraft parameterPackagist · getkirby/cms · fixed in 4.9.0, 5.4.0
- CVE-2026-34587Kirby has Server-Side Template Injection (SSTI) via double template resolution in option renderingPackagist · getkirby/cms · fixed in 4.9.0, 5.4.0
- CVE-2026-32870Kirby has XML injection in its XML creator toolkitPackagist · getkirby/cms · fixed in 4.9.0, 5.4.0
- CVE-2026-29051melange has Path Traversal via .PKGINFO in --persist-lint-resultsGo · chainguard.dev/melange · fixed in 0.43.4
- CVE-2026-29050melange has Path Traversal When Resolving External Pipelines via Unvalidated pipeline[].usesGo · chainguard.dev/melange · fixed in 0.43.4
- CVE-2026-41361OpenClaw < 2026.3.28 - SSRF Guard Bypass via IPv6 Special-Use Rangesnpm · openclaw · fixed in 2026.3.28