Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-34971Wasmtime miscompiled guest heap access enables sandbox escape on aarch64 Craneliftcrates.io · wasmtime · fixed in 36.0.7, 42.0.2, 43.0.1
- CVE-2026-34946Wasmtime's host panics when Winch compiler executes `table.fill`crates.io · wasmtime · fixed in 36.0.7, 42.0.2, 43.0.1
- CVE-2026-34945Wasmtime leaks host data with 64-bit tables and Winchcrates.io · wasmtime · fixed in 36.0.7, 42.0.2, 43.0.1
- CVE-2026-34944Wasmtime segfault or unused out-of-sandbox load with `f64x2.splat` operator on x86-64crates.io · wasmtime · fixed in 24.0.7, 36.0.7, 42.0.2 and more
- CVE-2026-34943Wasmtime panics when lifting `flags` component valuecrates.io · wasmtime · fixed in 24.0.7, 36.0.7, 42.0.2 and more
- CVE-2026-34942Wasmtime panics when transcoding misaligned utf-16 stringscrates.io · wasmtime · fixed in 24.0.7, 36.0.7, 42.0.2 and more
- CVE-2026-34941Wasmtime has a Heap OOB read in component model UTF-16 to latin1+utf16 string transcodingcrates.io · wasmtime · fixed in 24.0.7, 36.0.7, 42.0.2 and more
- CVE-2026-5971FoundationAgents MetaGPT XML action_node.py ActionNode.xml_fill eval injectionPyPI · metagpt
- CVE-2026-39315Unhead has a hasDangerousProtocol() bypass via leading-zero padded HTML entities in useHeadSafe()npm · unhead · fixed in 2.1.13
- CVE-2026-40072web3.py affected by SSRF via CCIP Read (EIP-3668) OffchainLookup URL handlingPyPI · web3 · fixed in 7.15.0, 8.0.0b2
- CVE-2026-40071pyLoad WebUI JSON permission mismatch lets ADD/DELETE users invoke MODIFY-only actionsPyPI · pyload-ng · fixed in 0.5.0b3.dev97
- CVE-2026-40070bsv-sdk and bsv-wallet persist unverified certifier signatures in acquire_certificate (direct and issuance paths)RubyGems · bsv-sdk, bsv-wallet · fixed in 0.8.2, 0.3.4
- CVE-2026-40069bsv-sdk ARC broadcaster treats INVALID/MALFORMED/ORPHAN responses as successful broadcastsRubyGems · bsv-sdk · fixed in 0.8.2
- CVE-2026-39987marimo Affected by Pre-Auth Remote Code Execution via Terminal WebSocket Authentication BypassPyPI · marimo · fixed in 0.23.0
- CVE-2026-39961Aiven Operator has cross-namespace secret exfiltration via ClickhouseUser connInfoSecretSourceGo · github.com/aiven/aiven-operator · fixed in 0.37.0
- CVE-2026-39983FTP Command Injection via CRLF in basic-ftpnpm · basic-ftp · fixed in 5.2.1
- CVE-2026-39981AGiXT has a Path Traversal in safe_join()PyPI · agixt · fixed in 1.9.2
- CVE-2026-5970FoundationAgents MetaGPT HumanEvalBenchmark/MBPPBenchmark check_solution code injectionPyPI · metagpt
- CVE-2026-39980OpenCTI affected by RCE via notifier templatePyPI · pycti · fixed in 6.9.5
- CVE-2026-39976Laravel Passport's TokenGuard Authenticates Unrelated User for Client Credentials TokensPackagist · laravel/passport · fixed in 13.7.1
- CVE-2026-39974n8n-MCP has an Authenticated SSRF via instance-URL header in multi-tenant HTTP modenpm · n8n-mcp · fixed in 2.47.4
- CVE-2026-39972Mercure has a Topic Selector Cache Key CollisionGo · github.com/dunglas/mercure · fixed in 0.22.0
- CVE-2026-39959Tmds.DBus: malicious D-Bus peers can spoof signals, exhaust file descriptor resources, and cause denial of serviceNuGet · tmds.dbus, tmds.dbus.protocol · fixed in 0.92.0, 0.21.3
- CVE-2026-39943Directus exposes sensitive fields in revision historynpm · directus · fixed in 11.17.0
- CVE-2026-39942Directus has a Path Traversal and Broken Access Control in File Management APInpm · directus · fixed in 11.17.0
- CVE-2026-40046Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ MQTT: Missing fix for CVE-2025-66168: MQTT control packet remaining length field is not properly validatedMaven · org.apache.activemq:activemq-all, org.apache.activemq:activemq-mqtt +1 · fixed in 6.2.4
- CVE-2026-33005Apache OpenMeetings: Insufficient checks in FileWebServiceMaven · org.apache.openmeetings:openmeetings-parent · fixed in 9.0.0
- CVE-2026-33266Apache OpenMeetings: Hardcoded Remember-Me Cookie Encryption Key and SaltMaven · org.apache.openmeetings:openmeetings-parent · fixed in 9.0.0
- CVE-2026-34020Apache OpenMeetings: Login Credentials Passed via GET Query ParametersMaven · org.apache.openmeetings:openmeetings-parent · fixed in 9.0.0
- CVE-2026-35205Helm's plugin verification fails open when .prov is missing, allowing unsigned plugin installGo · helm.sh/helm/v4 · fixed in 4.1.4