Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-40490AsyncHttpClient leaks authorization credentials to untrusted domains on cross-origin redirectsMaven · org.asynchttpclient:async-http-client · fixed in 3.0.9, 2.14.5
- CVE-2026-35582Emissary has an OS Command Injection via Unvalidated IN_FILE_ENDING / OUT_FILE_ENDING in ExecutrixMaven · gov.nsa.emissary:emissary · fixed in 8.43.0
- CVE-2026-40347Python-Multipart affected by Denial of Service via large multipart preamble or epilogue dataPyPI · python-multipart · fixed in 0.0.26
- CVE-2026-40346NocoBase has SSRF in Workflow HTTP Request and Custom Request Pluginsnpm · @nocobase/plugin-workflow-request · fixed in 2.0.37
- CVE-2026-40324Hot Chocolate's Utf8GraphQLParser has Stack Overflow via Deeply Nested GraphQL DocumentsNuGet · hotchocolate.language · fixed in 12.22.7, 13.9.16, 14.3.1 and more
- CVE-2026-40323SP1 V6 Recursion Circuit Row-Count Binding Gapcrates.io · sp1_prover, sp1_recursion_circuit +1 · fixed in 6.1.0
- CVE-2026-40481monetr: Unauthenticated Stripe webhook reads attacker-sized request bodies before signature validationGo · github.com/monetr/monetr · fixed in 1.12.4
- CVE-2026-40486Kimai's User Preferences API allows standard users to modify restricted attributes: hourly_rate, internal_ratePackagist · kimai/kimai · fixed in 2.53.0
- CVE-2026-40479Kimai: Stored XSS via Incomplete HTML Attribute Escaping in Team Member WidgetPackagist · kimai/kimai · fixed in 2.53.0
- CVE-2026-40478Improper neutralization of specific syntax patterns for unauthorized expressions in ThymeleafMaven · org.thymeleaf:thymeleaf, org.thymeleaf:thymeleaf-spring5 +1 · fixed in 3.1.4.RELEASE
- CVE-2026-40477Improper restriction of the scope of accessible objects in Thymeleaf expressionsMaven · org.thymeleaf:thymeleaf, org.thymeleaf:thymeleaf-spring5 +1 · fixed in 3.1.4.RELEASE
- CVE-2026-40476graphql-php: Denial of Service via quadratic complexity in OverlappingFieldsCanBeMerged validationPackagist · webonyx/graphql-php · fixed in 15.31.5
- CVE-2026-40474wger has Broken Access Control in the Global Gym Configuration Update EndpointPyPI · wger
- CVE-2026-40353wger: Stored XSS via Unescaped License Attribution FieldsPyPI · wger
- CVE-2026-40258Gramps Web API has Zip Slip Path Traversal in Media Archive ImportPyPI · gramps-webapi · fixed in 3.11.1
- CVE-2026-40321DotNetNuke.Core has stored cross-site-scripting (XSS) via SVG uploadNuGet · dotnetnuke.core · fixed in 10.2.2
- CVE-2026-40306DNN has same HostGUID for all new installsNuGet · dotnetnuke.core · fixed in 10.2.2
- CVE-2026-40305DNN has Force Friend Request AcceptanceNuGet · dotnetnuke.core · fixed in 10.2.2
- CVE-2026-40304zrok's broken ownership check in DELETE /api/v2/unaccess allows non-admin to delete global frontend recordsGo · github.com/openziti/zrok, github.com/openziti/zrok/v2 · fixed in 2.0.1
- CVE-2026-40303zrok allows unauthenticated DoS via unbounded memory allocation in striped session cookie parsingGo · github.com/openziti/zrok, github.com/openziti/zrok/v2 · fixed in 2.0.1
- CVE-2026-40302zrok has reflected XSS in GitHub OAuth callback via unsanitized refreshInterval error renderingGo · github.com/openziti/zrok, github.com/openziti/zrok/v2 · fixed in 2.0.1
- CVE-2026-40155Auth0 Next.js SDK has Improper Proxy Cache Lookupnpm · @auth0/nextjs-auth0 · fixed in 4.18.0
- CVE-2026-40301rhukster/dom-sanitizer: SVG <style> tag allows CSS injection via unfiltered url() and @import directivesPackagist · rhukster/dom-sanitizer · fixed in 1.0.10
- CVE-2026-40299next-intl has an open redirect vulnerabilitynpm · next-intl · fixed in 4.9.1
- CVE-2026-40293OpenFGA Playground Preshared Key ExposureGo · github.com/openfga/openfga · fixed in 1.14.0
- CVE-2026-35603Claude Code: Insecure System-Wide Configuration Loading Enables Local Privilege Escalation on Windowsnpm · @anthropic-ai/claude-code · fixed in 2.1.75
- CVE-2026-35402mcp-neo4j-cypher: SSRF and Data Modification via read_only Mode Bypass Through CALL ProceduresPyPI · mcp-neo4j-cypher · fixed in 0.6.0
- CVE-2026-23500Dolibarr: OS Command Injection (RCE) via MAIN_ODT_AS_PDF configurationPackagist · dolibarr/dolibarr
- CVE-2026-6437AWS EFS CSI Driver Mount Option InjectionGo · github.com/kubernetes-sigs/aws-efs-csi-driver · fixed in 1.7.8-0.20260416142831-51806c22c575
- CVE-2026-40525OpenViking < 0.3.9 Authentication Bypass via VikingBot OpenAPIPyPI · openviking · fixed in 0.3.9