Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-96644Pillow: Heap over-read in WMF/EMF rendering via 16-bit dimension truncation (Windows builds)PyPI · pillow · fixed in 13.0.0
- CVE-2026-96641Pillow: Reachable undefined behavior in native integer operations, potentially leading to denial of service or logic integrity compromisePyPI · pillow · fixed in 13.0.0
- CVE-2026-96642Pillow: TarIO negative size field causes infinite CPU-spin loopPyPI · pillow · fixed in 13.0.0
- CVE-2026-96638Pillow: BMP RLE decoder memory-amplification DoS via unbounded delta escape / absolute modePyPI · pillow · fixed in 13.0.0
- CVE-2026-114145GitPython validates a submodule's ".git" path only after cloning into it (RCE)PyPI · gitpython · fixed in 3.2.1
- CVE-2026-114144toml-node: Uncontrolled resource consumption (CPU DoS) via unbounded-length integer literals in toml.parse()npm · toml · fixed in 5.0.1
- CVE-2026-114143toml-node: Quadratic-complexity DoS via long dotted keys or table paths in toml.parse()npm · toml · fixed in 5.0.1
- CVE-2026-114142toml-node: Prototype pollution: parsing a TOML document can write to Object.prototypenpm · toml · fixed in 5.0.1
- CVE-2026-114141toml-node: Quadratic-complexity DoS via many array-of-tables headers in toml.parse()npm · toml · fixed in 5.0.1
- CVE-2026-114140nbconvert: File write via path traversal in cell output filenamesPyPI · nbconvert · fixed in 7.17.2
- CVE-2026-114139Sentry-Javascript: Middleware Bypass when using Tunnel routenpm · @sentry/nextjs · fixed in 9.47.2, 10.75.2, 11.0.0-rc.1
- CVE-2026-114138Django REST framework: Accept header with many large quoted parameters burns ~19s of CPU per request in content negotiationPyPI · djangorestframework · fixed in 3.18.2
- CVE-2026-114137Django REST framework: TokenProxy.delete() reports success and revokes nothingPyPI · djangorestframework · fixed in 3.18.2
- CVE-2026-114136Django REST framework: JSONParser applies an attacker-named codec to the request streamPyPI · djangorestframework · fixed in 3.18.2
- CVE-2026-114135Jupyter Server: Gateway WebSocket handler bypasses kernel execute authorizationPyPI · jupyter-server · fixed in 2.6.0
- CVE-2026-114133Nuxt server islands render `useHeadSafe` input without sanitisationnpm · nuxt · fixed in 4.6.2
- CVE-2026-114132Nuxt: Server-side route rules (`redirect`, `headers`, `proxy`, `ssr`) are skipped for case-variant paths when routing is case-insensitivenpm · @nuxt/nitro-server, nuxt · fixed in 4.6.2
- CVE-2026-114131Nuxt: Route rules are matched against the raw request path, so a percent-encoded segment can bypass `appMiddleware` on dynamic and…npm · nuxt · fixed in 4.4.4, 3.21.4
- CVE-2026-114130Nuxt: Incomplete fix for GHSA-934w-87qh-qr26: a `javascript:` URL prefixed with an ASCII control character executes from `<NuxtLink>` when `pages` is disablednpm · nuxt · fixed in 4.6.0
- CVE-2026-114129stream-json: FlexAssembler string/RegExp path filters join the full key stack per container start, giving O(depth^2) CPU denial of servicenpm · stream-json · fixed in 3.7.0
- CVE-2026-114128Astro: Reflected/Stored XSS via unescaped <script>/<style> tag content in JSX/MDX renderingnpm · astro · fixed in 7.3.2
- CVE-2026-114127Astro: Arbitrary CSS injection in Astro View Transitionsnpm · astro · fixed in 7.3.3
- CVE-2026-114126Storybook dev server: devices on the same network can obtain the WebSocket token and write code into story filesnpm · @storybook/addon-mcp, @storybook/addon-vitest +4 · fixed in 10.6.2, 11.0.0-alpha.6, 9.1.21 and more
- CVE-2026-114125Storybook: Missing origin validation in Storybook preview allows code injection from malicious websitesnpm · @storybook/addon-mcp, @storybook/addon-vitest +4 · fixed in 10.6.2, 11.0.0-alpha.6, 9.1.21 and more
- CVE-2026-114124Electron: Off-screen rendering on macOS trusts GPU-supplied frame geometrynpm · electron · fixed in 42.11.6, 43.7.3, 44.4.3 and more
- CVE-2026-114122Electron: Frame subscription trusts GPU-supplied frame geometrynpm · electron · fixed in 42.11.6, 43.7.3, 44.4.3 and more
- CVE-2026-114121Electron: openExternal permission requests can be attributed to the wrong originnpm · electron · fixed in 42.11.3, 43.7.0, 44.3.0 and more
- CVE-2026-113800Electron: HID and USB permission checks can be attributed to the wrong originnpm · electron · fixed in 45.0.0-alpha.5, 44.3.0, 43.7.0 and more
- CVE-2026-113799Slack Morphism verifier errors disclose valid HMACs in the logscrates.io · slack-morphism · fixed in 2.28.0
- CVE-2026-113798Electron: Pointer lock permission requests can be attributed to the wrong framenpm · electron · fixed in 45.0.0-alpha.13, 44.5.0, 43.7.6 and more