Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-41264Flowise: CSV Agent Prompt Injection Remote Code Execution Vulnerabilitynpm · flowise, flowise-components · fixed in 3.1.0
- CVE-2026-41265Flowise: Airtable_Agent Code Injection Remote Code Execution Vulnerabilitynpm · flowise, flowise-components · fixed in 3.1.0
- CVE-2026-41279Flowise: Unauthenticated TTS endpoint accepts arbitrary credential IDs — enables API credit abuse via stored credentialsnpm · flowise · fixed in 3.1.0
- CVE-2026-41278Flowise: Public chatflow endpoints return unsanitized flowData including plaintext API keys, passwords, and credential IDsnpm · flowise · fixed in 3.1.0
- CVE-2026-41276Flowise: AccountService resetPassword Authentication Bypass Vulnerabilitynpm · flowise · fixed in 3.1.0
- CVE-2026-41277Flowise: Mass Assignment in DocumentStore Create Endpoint Leads to Cross-Workspace Object Takeover (IDOR)npm · flowise · fixed in 3.1.0
- CVE-2026-41275Flowise: Password Reset Link Sent Over Unsecured HTTPnpm · flowise · fixed in 3.1.0
- CVE-2026-41273Flowise: Unauthenticated OAuth 2.0 Access Token Disclosure via Public Chatflownpm · flowise · fixed in 3.1.0
- CVE-2026-41271Flowise: APIChain Prompt Injection SSRF in GET/POST API Chainsnpm · flowise, flowise-components · fixed in 3.1.0
- CVE-2026-41272Flowise: SSRF Protection Bypass (TOCTOU & Default Insecure)npm · flowise, flowise-components · fixed in 3.1.0
- CVE-2026-41270Flowise: SSRF Protection Bypass via Unprotected Built-in HTTP Modules in Custom Function Sandboxnpm · flowise, flowise-components · fixed in 3.1.0
- CVE-2026-41269Flowise: File Upload Validation Bypass in createAttachmentnpm · flowise · fixed in 3.1.0
- CVE-2026-41268Flowise: Flowise Parameter Override Bypass Remote Command Executionnpm · flowise, flowise-components · fixed in 3.1.0
- CVE-2026-41267Flowise: Improper Mass Assignment in Account Registration Enables Unauthorized Organization Associationnpm · flowise · fixed in 3.1.0
- CVE-2026-41266Flowise: Sensitive Data Leak in public-chatbotConfignpm · flowise · fixed in 3.1.0
- CVE-2026-41137Flowise: Code Injection in CSVAgent leads to Authenticated RCEnpm · flowise, flowise-components · fixed in 3.1.0
- CVE-2026-41138Flowise: Remote code execution vulnerability in AirtableAgent.ts caused by lack of input verification when using Pandas.npm · flowise, flowise-components · fixed in 3.1.0
- CVE-2026-41205Mako: Path traversal via double-slash URI prefix in TemplateLookupPyPI · mako · fixed in 1.3.11
- CVE-2026-41247elFinder: Command injection in resize background color parameter when using ImageMagick CLIPackagist · studio-42/elfinder · fixed in 2.1.67
- CVE-2026-41246Contour: Lua code injection via Cookie Path Rewrite PolicyGo · github.com/projectcontour/contour · fixed in 1.31.6, 1.32.5, 1.33.4
- CVE-2026-41213@node-oauth/oauth2-server: PKCE code_verifier ABNF not enforced in token exchange allows brute-force redemption of intercepted authorization codesnpm · @node-oauth/oauth2-server · fixed in 5.3.0
- CVE-2026-41241pretalx: Stored cross-site scripting in organiser search typeaheadPyPI · pretalx · fixed in 2026.1.0
- CVE-2026-41173Unbounded HTTP response body read in OpenTelemetry.Sampler.AWSNuGet · opentelemetry.resources.aws, opentelemetry.sampler.aws · fixed in 1.15.1, 0.1.0-alpha.8
- CVE-2026-40886Argo Workflows: Unchecked annotation parsing in pod informer crashes Argo Workflows controllerGo · github.com/argoproj/argo-workflows, github.com/argoproj/argo-workflows/v2 +2 · fixed in 3.7.14, 4.0.5
- CVE-2026-41078OpenTelemetry dotnet: Potential memory exhaustion via unbounded pooled-list sizing in Jaeger exporter conversion pathNuGet · opentelemetry.exporter.jaeger
- CVE-2026-40894OpenTelemetry dotnet: Excessive memory allocation when parsing OpenTelemetry propagation headersNuGet · opentelemetry.api, opentelemetry.extensions.propagators · fixed in 1.15.3
- CVE-2026-40891OpenTelemetry dotnet: Unbounded `grpc-status-details-bin` parsing in OTLP/gRPC retry handlingNuGet · opentelemetry.exporter.opentelemetryprotocol · fixed in 1.15.3
- CVE-2026-41909OpenClaw < 2026.4.20 - Improper Authorization in Paired-Device Pairing Actionsnpm · openclaw · fixed in 2026.4.20
- CVE-2026-41908OpenClaw < 2026.4.20 - Scope Enforcement Bypass in Assistant-Media Routenpm · openclaw · fixed in 2026.4.20
- CVE-2026-40182OpenTelemetry dotnet: OTLP exporter reads unbounded HTTP response bodiesNuGet · opentelemetry.exporter.opentelemetryprotocol · fixed in 1.15.2