Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-1116Cross-site Scripting (XSS) in parisneo/lollmsPyPI · lollms · fixed in 2.1.1
- CVE-2026-6110FoundationAgents MetaGPT Tree-of-Thought Solver tot.py generate_thoughts code injectionPyPI · metagpt
- CVE-2026-6109FoundationAgents MetaGPT Mineflayer HTTP API index.js evaluateCode cross-site request forgeryPyPI · metagpt
- CVE-2026-3691OpenClaw Client PKCE Verifier Information Disclosure Vulnerabilitynpm · openclaw · fixed in 2026.2.25
- CVE-2026-3690OpenClaw Canvas Authentication Bypass Vulnerabilitynpm · openclaw · fixed in 2026.2.19
- CVE-2026-3689OpenClaw Canvas Path Traversal Information Disclosure Vulnerabilitynpm · openclaw · fixed in 2026.2.21
- CVE-2026-5059aws-mcp-server AWS CLI Command Injection Remote Code Execution VulnerabilityPyPI · aws-mcp
- CVE-2026-5724Missing Authentication on Streaming gRPC Replication EndpointGo · go.temporal.io/server · fixed in 1.28.4, 1.29.6, 1.30.4
- CVE-2026-40242Arcane Unauthenticated SSRF with Conditional Response Reflection in Template Fetch EndpointGo · github.com/getarcaneapp/arcane/backend · fixed in 1.17.3
- CVE-2026-40194phpseclib has a variable-time HMAC comparison in SSH2::get_binary_packet() using != instead of hash_equals()Packagist · phpseclib/phpseclib · fixed in 1.0.28, 2.0.53, 3.0.51
- CVE-2026-39922GeoNode SSRF via Service RegistrationPyPI · geonode · fixed in 4.4.5, 5.0.2
- CVE-2026-39921GeoNode < 4.4.5, 5.0.2 SSRF via Document UploadPyPI · geonode · fixed in 4.4.5, 5.0.2
- CVE-2026-40190LangSmith Client SDKs has Prototype Pollution in langsmith-sdk via Incomplete `__proto__` Guard in Internal lodash `set()`npm · langsmith · fixed in 0.5.18
- CVE-2026-40189goshs has a file-based ACL authorization bypass in goshs state-changing routesGo · github.com/patrickhener/goshs
- CVE-2026-40188goshs is Missing Write Protection for Parametric Data ValuesGo · github.com/patrickhener/goshs
- CVE-2026-40180Zip Slip Path Traversal in quarkus-openapi-generator ApicurioCodegenWrapper classMaven · io.quarkiverse.openapi.generator:quarkus-openapi-generator · fixed in 2.16.0
- CVE-2026-40178ajenti.plugin.core has a race conditions in 2FAPyPI · ajenti-plugin-core · fixed in 0.112
- CVE-2026-40177Password bypass when 2FA is activatedPyPI · ajenti-plugin-core · fixed in 0.112
- CVE-2026-40175Axios has Unrestricted Cloud Metadata Exfiltration via Header Injection Chainnpm · axios · fixed in 1.15.0, 0.31.0
- CVE-2026-40163Saltcorn has an Unauthenticated Path Traversal in sync endpoints allows arbitrary file write and directory readnpm · @saltcorn/server · fixed in 1.4.5, 1.5.5, 1.6.0-beta.4
- CVE-2026-40162Bugsink affected by authenticated arbitrary file write in artifactbundle/assemblePyPI · bugsink · fixed in 2.1.1
- CVE-2026-40160PraisonAIAgents has SSRF via unvalidated URL in `web_crawl` httpx fallbackPyPI · praisonaiagents · fixed in 1.5.128
- CVE-2026-40159PraisonAI Exposes Sensitive Environment Variable via Untrusted MCP Subprocess ExecutionPyPI · praisonai · fixed in 4.5.128
- CVE-2026-40158PraisonAI has Improper Control of Generation of Code ('Code Injection') and Protection Mechanism Failure in praisonaiPyPI · praisonai · fixed in 4.5.128
- CVE-2026-40157PraisonAI affected by arbitrary file write via path traversal in `praisonai recipe unpack`PyPI · praisonai · fixed in 4.5.128
- CVE-2026-40156PraisonAI Affected by Implicit Execution of Arbitrary Code via Automatic `tools.py` LoadingPyPI · praisonai · fixed in 4.5.128
- CVE-2026-40097Step CA affected by an index out of bounds panic in TPM attestation EKU validationGo · github.com/smallstep/certificates · fixed in 0.30.0
- CVE-2026-40074SvelteKit's invalidated redirect in handle hook causes Denial-of-Servicenpm · @sveltejs/kit · fixed in 2.57.1
- CVE-2026-40073SvelteKit has a BODY_SIZE_LIMIT bypass in @sveltejs/adapter-nodenpm · @sveltejs/kit · fixed in 2.57.1
- CVE-2026-40086Rembg has a Path Traversal via Custom Model LoadingPyPI · rembg · fixed in 2.0.75