Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-41240DOMPurify: FORBID_TAGS bypassed by function-based ADD_TAGS predicate (asymmetry with FORBID_ATTR fix)npm · dompurify · fixed in 3.4.0
- CVE-2026-41239DOMPurify has a SAFE_FOR_TEMPLATES bypass in RETURN_DOM modenpm · dompurify · fixed in 3.4.0
- CVE-2026-41238DOMPurify: Prototype Pollution to XSS Bypass via CUSTOM_ELEMENT_HANDLING Fallbacknpm · dompurify · fixed in 3.4.0
- CVE-2025-62373Pipecat vulnerable to Remote Code Execution by Pickle Deserialization via LivekitFrameSerializerPyPI · pipecat-ai · fixed in 0.0.94
- CVE-2026-3960Remote Code Execution in h2oai/h2o-3PyPI · h2o · fixed in 3.46.0.10
- CVE-2026-41988uuid before 14.0.0 can make unexpected writes when external output buffers are used, and the UUID version is 3, 5, or 6.npm · uuid · fixed in 11.1.1, 12.0.1, 13.0.1
- CVE-2026-41233Froxlor has a Reseller Domain Quota Bypass via Unvalidated adminid Parameter in Domains.add()Packagist · froxlor/froxlor · fixed in 2.3.6
- CVE-2026-41232Froxlor has an Email Sender Alias Domain Ownership Bypass via Wrong Array Index that Allows Cross-Customer Email SpoofingPackagist · froxlor/froxlor · fixed in 2.3.6
- CVE-2026-41231Froxlor has Incomplete Symlink Validation in DataDump.add() that Allows Arbitrary Directory Ownership Takeover via CronPackagist · froxlor/froxlor · fixed in 2.3.6
- CVE-2026-41230Froxlor has a BIND Zone File Injection via Unsanitized DNS Record Content in DomainZones::add()Packagist · froxlor/froxlor · fixed in 2.3.6
- CVE-2026-41229Froxlor has a PHP Code Injection via Unescaped Single Quotes in userdata.inc.php Generation (MysqlServer API)Packagist · froxlor/froxlor · fixed in 2.3.6
- CVE-2026-41228Froxlor has Local File Inclusion via path traversal in API `def_language` parameter that leads to Remote Code ExecutionPackagist · froxlor/froxlor · fixed in 2.3.6
- CVE-2026-41211`vite-plus/binding` has path traversal `downloadPackageManager()` that leads to writes outside of `VP_HOME`npm · vite-plus · fixed in 0.1.17
- CVE-2026-41679Paperclip Vulnerable to Unauthenticated Remote Code Execution via Import Authorization Bypassnpm · @paperclipai/server, paperclipai · fixed in 2026.410.0
- CVE-2026-41208Paperclip: Privilege Escalation via Agent-Controlled workspaceStrategy.provisionCommand Leading to OS Command Executionnpm · @paperclipai/server · fixed in 2026.416.0
- CVE-2026-41206PySpector has a Plugin Code Execution Bypass via Incomplete Static Analysis in PluginSecurity.validate_plugin_codePyPI · pyspector · fixed in 0.1.8
- CVE-2026-41197Brillig: Heap corruption in foreign call results with nested tuple arrayscrates.io · brillig · fixed in 1.0.0-beta.19
- CVE-2026-41182LangSmith SDK: Streaming token events bypass output redactionnpm · langsmith · fixed in 0.5.19
- CVE-2026-41180PsiTransfer: Upload PATCH path traversal can create `config.<NODE_ENV>.js` and lead to code execution on restartnpm · psitransfer · fixed in 2.4.3
- CVE-2026-41179RClone: Unauthenticated operations/fsinfo allows attacker-controlled backend instantiation and local command executionGo · github.com/ncw/rclone, github.com/rclone/rclone · fixed in 1.73.5
- CVE-2026-6878ByteDance verl grader.py math_equal sandboxPyPI · verl
- CVE-2026-39087ntfy before 2.22.0 allows SSRF because of an unanchored regular expression for web push endpoint URLs.Go · heckel.io/ntfy, heckel.io/ntfy/v2 · fixed in 2.22.0
- CVE-2026-41176Rclone: Unauthenticated options/set allows runtime auth bypass, leading to sensitive operations and command executionGo · github.com/rclone/rclone · fixed in 1.73.5
- CVE-2026-6874ericc-ch copilot-api Header token dns rebindingnpm · copilot-api
- CVE-2026-41175Statamic: Unsafe method invocation via query value resolution allows data destructionPackagist · statamic/cms · fixed in 5.73.20, 6.13.0
- CVE-2026-41314pypdf: Manipulated FlateDecode image dimensions can exhaust RAMPyPI · pypdf · fixed in 6.10.2
- CVE-2026-41313pypdf: Possible long runtimes for wrong size values in incremental modePyPI · pypdf · fixed in 6.10.2
- CVE-2026-41312pypdf: Manipulated FlateDecode predictor parameters can exhaust RAMPyPI · pypdf · fixed in 6.10.2
- CVE-2026-41168pypdf has possible long runtimes for wrong size values in cross-reference and object streamsPyPI · pypdf · fixed in 6.10.1
- CVE-2026-40882OpenRemote has XXE in Velbus Asset ImportMaven · io.openremote:openremote-manager · fixed in 1.22.0