Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-40115PraisonAI has an Unrestricted Upload Size in WSGI Recipe Registry Server Enables Memory Exhaustion DoSPyPI · praisonai · fixed in 4.5.128
- CVE-2026-40114PraisonAI has Server-Side Request Forgery via Unvalidated webhook_url in Jobs APIPyPI · praisonai · fixed in 4.5.128
- CVE-2026-40113PraisonAI has an Argument Injection into Cloud Run Environment Variables via Unsanitized Comma in gcloud --set-env-varsPyPI · praisonai · fixed in 4.5.128
- CVE-2026-40112PraisonAI has Stored XSS via Unsanitized Agent Output in HTML Rendering (nh3 Not a Required Dependency)PyPI · praisonai · fixed in 4.5.128
- CVE-2026-40111PraisonAIAgents has an OS Command Injection via shell=True in Memory Hooks Executor (memory/hooks.py)PyPI · praisonaiagents · fixed in 1.5.128
- CVE-2026-40109Flux notification-controller GCR Receiver missing email validation allows unauthorized reconciliation triggeringGo · github.com/fluxcd/notification-controller · fixed in 1.8.3
- CVE-2026-40107SiYuan Affected by Zero-Click NTLM Hash Theft and Blind SSRF via Mermaid Diagram RenderingGo · github.com/siyuan-note/siyuan/kernel · fixed in 0.0.0-20260407035653-2f416e5253f1
- CVE-2026-35206Helm Chart extraction output directory collapse via `Chart.yaml` name dot-segmentGo · helm.sh/helm/v3, helm.sh/helm/v4 · fixed in 3.20.2, 4.1.4
- CVE-2026-40093nimiq-blockchain is missing a wall-clock upper bound on block timestampscrates.io · nimiq-blockchain
- CVE-2026-40088Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in praisonaiPyPI · praisonai · fixed in 4.5.121
- CVE-2026-34500Apache Tomcat: OCSP checks sometimes soft-fail with FFM even when soft-fail is disabledMaven · org.apache.tomcat:tomcat-coyote-ffm · fixed in 9.0.117, 10.1.54, 11.0.21
- CVE-2026-34487Apache Tomcat: Cloud membership for clustering component exposed the Kubernetes bearer tokenMaven · org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat:tomcat +1 · fixed in 9.0.117, 10.1.54, 11.0.21
- CVE-2026-34486Apache Tomcat: Fix for CVE-2026-29146 allowed bypass of EncryptInterceptorMaven · org.apache.tomcat:tomcat, org.apache.tomcat:tomcat-tribes · fixed in 11.0.21, 10.1.54, 9.0.117
- CVE-2026-40087LangChain has incomplete f-string validation in prompt templatesPyPI · langchain-core · fixed in 0.3.84, 1.2.28
- CVE-2026-34483Apache Tomcat: Incomplete escaping of JSON access logsMaven · org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat:tomcat +1 · fixed in 9.0.116, 10.1.54, 11.0.21
- CVE-2026-5974FoundationAgents MetaGPT terminal.py Bash.run os command injectionPyPI · metagpt
- CVE-2026-40077Beszel has an IDOR in hub API endpoints that read system ID from URL parameterGo · github.com/henrygd/beszel · fixed in 0.18.7
- CVE-2026-32990Apache Tomcat: Fix for CVE-2025-66614 is incompleteMaven · org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat:tomcat +1 · fixed in 9.0.116, 10.1.53, 11.0.20
- CVE-2026-29146Apache Tomcat: EncryptInterceptor vulnerable to padding oracle attack by defaultMaven · org.apache.tomcat:tomcat, org.apache.tomcat:tomcat-tribes · fixed in 9.0.116, 10.1.53, 11.0.20
- CVE-2026-29145Apache Tomcat, Apache Tomcat Native: OCSP checks sometimes soft-fail even when soft-fail is disabledMaven · org.apache.tomcat:tomcat, org.apache.tomcat:tomcat-coyote-ffm · fixed in 9.0.116, 10.1.53, 11.0.20
- CVE-2026-29129Apache Tomcat: TLS cipher order is not preservedMaven · org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat:tomcat +1 · fixed in 9.0.116, 10.1.53, 11.0.20
- CVE-2026-5973FoundationAgents MetaGPT common.py get_mime_type os command injectionPyPI · metagpt
- CVE-2026-25854Apache Tomcat: Occasionally open redirectMaven · org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat:tomcat +1 · fixed in 9.0.116, 10.1.53, 11.0.20
- CVE-2026-24880Apache Tomcat: Request smuggling via invalid chunk extensionMaven · org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat:tomcat-coyote · fixed in 9.0.116, 10.1.52, 11.0.20
- CVE-2026-5972FoundationAgents MetaGPT terminal.py Terminal.run_command os command injectionPyPI · metagpt · fixed in 0.8.2
- CVE-2026-35195Wasmtime has an out-of-bounds write or crash when transcoding component model stringscrates.io · wasmtime · fixed in 24.0.7, 36.0.7, 42.0.2 and more
- CVE-2026-35186Wasmtime has an improperly masked return value from `table.grow` with Winch compiler backendcrates.io · wasmtime · fixed in 36.0.7, 42.0.2, 43.0.1
- CVE-2026-34988Wasmtime leaks data between pooling allocator instancescrates.io · wasmtime · fixed in 36.0.7, 42.0.2, 43.0.1
- CVE-2026-34987Wasmtime with Winch compiler backend on aarch64 may allow a sandbox-escaping memory accesscrates.io · wasmtime · fixed in 36.0.7, 42.0.2, 43.0.1
- CVE-2026-34983Wasmtime has a use-after-free bug after cloning `wasmtime::Linker`PyPI · wasmtime