Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2025-14551Senstive information disclosure was affecting subiquityPyPI · subiquity
- CVE-2026-35204Helm has a path traversal in plugin metadata version enables arbitrary file write outside Helm plugin directoryGo · helm.sh/helm/v4 · fixed in 4.1.4
- CVE-2026-35041ReDoS in fast-jwt when using RegExp in allowed* leading to CPU exhaustion during token verificationnpm · fast-jwt · fixed in 6.2.1
- CVE-2026-35040fast-jwt: Stateful RegExp (/g or /y) causes non-deterministic allowed-claim validation (logical DoS)npm · fast-jwt · fixed in 6.2.1
- CVE-2025-62718Axios has a NO_PROXY Hostname Normalization Bypass that Leads to SSRFnpm · axios · fixed in 1.15.0, 0.31.0
- CVE-2026-4660Go-getter may allow to arbitrary filesystem reads through git operationsGo · github.com/hashicorp/go-getter · fixed in 1.8.6
- CVE-2025-57735Apache Airflow: Airflow Logout Not Invalidating JWTPyPI · apache-airflow, apache-airflow-core · fixed in 3.2.0
- CVE-2026-24661Unbounded Request Body Read in MS Teams Plugin {{/changes}} Webhook EndpointGo · github.com/mattermost/mattermost-plugin-msteams · fixed in 1.15.1-0.20260213190728-6fe4d295592e
- CVE-2026-21388Unbounded Request Body Read in MS Teams Plugin {{/lifecycle}} Webhook EndpointGo · github.com/mattermost/mattermost-plugin-msteams · fixed in 1.15.1-0.20260213190728-6fe4d295592e
- CVE-2025-62188Apache DolphinScheduler: Users can access sensitive information through the actuator endpoint.Maven · org.apache.dolphinscheduler:dolphinscheduler · fixed in 3.2.0
- CVE-2026-34179Update of type field in restricted TLS certificate allows privilege escalation to cluster adminGo · github.com/canonical/lxd
- CVE-2026-34178Importing a crafted backup leads to project restriction bypassGo · github.com/canonical/lxd
- CVE-2026-34177VM lowlevel restriction bypass via raw.apparmor and raw.qemu.confGo · github.com/canonical/lxd
- CVE-2026-34538Apache Airflow: Authorization bypass in DagRun wait endpoint (XCom exposure)PyPI · apache-airflow, apache-airflow-core · fixed in 3.2.0
- CVE-2026-5842decolua 9router Administrative API Endpoint api authorizationnpm · 9router · fixed in 0.3.75
- CVE-2026-5833awwaiid mcp-server-taskwarrior index.ts server.setRequestHandler command injectionnpm · mcp-server-taskwarrior
- CVE-2026-5832atototo api-lab-mcp HTTP http-server.ts test_http_endpoint server-side request forgerynpm · api-lab-mcp
- CVE-2026-5831Agions taskflow-ai terminal_execute handlers.ts os command injectionnpm · taskflow-ai · fixed in 2.1.9
- CVE-2026-40037OpenClaw < 2026.4.8 - Unsafe Request Body Replay via fetchWithSsrFGuard Cross-Origin Redirectsnpm · openclaw · fixed in 2026.4.8
- CVE-2026-40036Unfurl < 2026.04 - Denial of Service via Unbounded zlib DecompressionPyPI · dfir-unfurl · fixed in 2026.04, 20260405
- CVE-2026-40035Unfurl - Werkzeug Debugger Exposure via String Config ParsingPyPI · dfir-unfurl
- CVE-2026-39901monetr: Protected Transactions Deletable via PUTGo · github.com/monetr/monetr · fixed in 1.12.3
- CVE-2026-39892cryptography has a buffer overflow if non-contiguous buffers were passed to APIsPyPI · cryptography · fixed in 46.0.7
- CVE-2026-39891PraisonAI has a Template Injection in Agent Tool DefinitionsPyPI · praisonai · fixed in 4.5.115
- CVE-2026-39890PraisonAI Affected by Remote Code Execution via YAML Deserialization in Agent Definition LoadingPyPI · praisonai · fixed in 4.5.115
- CVE-2026-39889PraisonAI has Unauthenticated SSE Event Stream Exposes All Agent Activity in A2U ServerPyPI · praisonai · fixed in 4.5.115
- CVE-2026-39888PraisonAIAgents has a sandbox escape via exception frame traversal in `execute_code` (subprocess mode)PyPI · praisonaiagents · fixed in 1.5.115
- CVE-2026-39885FrontMCP Affected by SSRF via $ref Dereferencing in Untrusted OpenAPI Specificationsnpm · @frontmcp/adapters, @frontmcp/sdk +1 · fixed in 1.0.4, 2.3.0
- CVE-2026-39883OpenTelemetry-Go has an incomplete fix for CVE-2026-24051: BSD kenv command not using absolute path enables PATH hijackingGo · go.opentelemetry.io/otel/sdk · fixed in 1.43.0
- CVE-2026-39882OpenTelemetry-Go OTLP HTTP exporters read unbounded HTTP response bodiesGo · go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp, go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp +1 · fixed in 0.19.0, 1.43.0