Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-25524OpenMage LTS's Phar Deserialization leads to Remote Code ExecutionPackagist · openmage/magento-lts · fixed in 20.17.0
- CVE-2026-41245Junrar: Path Traversal (Zip-Slip) via Sibling Directory Name PrefixMaven · com.github.junrar:junrar · fixed in 7.5.10
- CVE-2026-3219pip doesn't reject concatenated ZIP and tar archivesPyPI · pip · fixed in 26.1
- CVE-2026-33557Apache Kafka: Missing JWT token validation in OAUTHBEARER authenticationMaven · org.apache.kafka:kafka-clients · fixed in 4.1.2
- CVE-2025-66335Apache Doris MCP Server: MCP SQL injectPyPI · doris-mcp-server · fixed in 0.6.1
- CVE-2026-33558Apache Kafka, Apache Kafka Clients: Information Exposure Through Network Client Log OutputMaven · org.apache.kafka:kafka-clients · fixed in 3.9.2, 4.0.1
- CVE-2026-6634usememos UpdateInstanceSetting App.tsx memos_access_token improper authorizationGo · github.com/usememos/memos
- CVE-2026-6654Use-After-Free and Double-Free in IntoIter::drop when element drop panicscrates.io · thin-vec · fixed in 0.2.16
- CVE-2026-6626Cockpit-HQ Cockpit Asset Handler/Aggregate data query logic injectionPackagist · cockpit-hq/cockpit · fixed in 2.14.0
- CVE-2026-41282ProjectDiscovery Nuclei 3 before 3.8.0 allows DSL expression injection.Go · github.com/projectdiscovery/nuclei, github.com/projectdiscovery/nuclei/v2 +1 · fixed in 3.8.0
- CVE-2026-6608lm-sys fastchat Arena Side-by-Side View add_text control flowPyPI · fschat
- CVE-2026-6607lm-sys fastchat Worker API Endpoint api_generate resource consumptionPyPI · fschat
- CVE-2026-6606modelscope agentscope _agent_base.py _process_audio_block server-side request forgeryPyPI · agentscope
- CVE-2026-6605modelscope agentscope Internal Service _common.py _get_bytes_from_web_url server-side request forgeryPyPI · agentscope
- CVE-2026-6604modelscope agentscope Cloud Metadata Endpoint _openai_tools.py openai_audio_to_text server-side request forgeryPyPI · agentscope
- CVE-2026-6603modelscope agentscope _python.py execute_shell_command code injectionPyPI · agentscope
- CVE-2026-6599langflow-ai langflow Model Context Protocol Configuration API mcp_projects.py install_mcp_config injectionPyPI · langflow
- CVE-2026-6598langflow-ai langflow Project Creation Endpoint projects.py encrypt_auth_settings cleartext storage in filePyPI · langflow · fixed in 1.9.1
- CVE-2026-6597langflow-ai langflow Flow Using API core.py has_api_terms credentials storagePyPI · langflow
- CVE-2026-6596langflow-ai langflow API Endpoint endpoints.py create_upload_file unrestricted uploadPyPI · langflow-base · fixed in 0.9.1
- CVE-2026-6594brikcss merge prototype pollutionnpm · @brikcss/merge
- CVE-2026-6587vibrantlabsai RAGAS Collections util.py _try_process_url server-side request forgeryPyPI · ragas
- CVE-2026-41242protobufjs has an arbitrary code execution issuenpm · protobufjs · fixed in 8.0.1, 7.5.5, 6.11.6
- CVE-2026-40948Apache Airflow Providers Keycloak: OAuth Login CSRF — Missing State Parameter in Keycloak Auth ManagerPyPI · apache-airflow-providers-keycloak · fixed in 0.7.0
- CVE-2026-32690Apache Airflow: 3.x - Nested Variable Secret Values Bypass Redaction via max_depth=1PyPI · apache-airflow, apache-airflow-core · fixed in 3.2.0
- CVE-2026-30898Apache Airflow: Bad example of BashOperator shell injection via dag_run.confPyPI · apache-airflow, apache-airflow-core · fixed in 3.0.0, 3.2.0
- CVE-2026-30912Apache Airflow: Exposing stack trace in case of constraint errorPyPI · apache-airflow, apache-airflow-core · fixed in 3.0.0, 3.2.0
- CVE-2026-25917Apache Airflow: API extra-links triggers XCom deserialization/class instantiation (Airflow 3.1.5)PyPI · apache-airflow, apache-airflow-core · fixed in 3.0.0, 3.2.0
- CVE-2026-32228Apache Airflow: Users with asset materialization permisssions could trigger Dags they had no access toPyPI · apache-airflow-core · fixed in 3.2.0
- CVE-2026-40491gdown Affected by Arbitrary File Write via Path Traversal in gdown.extractallPyPI · gdown · fixed in 5.2.2