Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-35523Authentication bypass in strawberry-graphql via legacy graphql-ws WebSocket subprotocolPyPI · strawberry-graphql · fixed in 0.312.3
- CVE-2026-35583Emissary has a Path Traversal via Blacklist Bypass in Configuration APIMaven · gov.nsa.emissary:emissary · fixed in 8.39.0
- CVE-2026-35581Emissary has a Command Injection via PLACE_NAME Configuration in ExecutrixMaven · gov.nsa.emissary:emissary · fixed in 8.39.0
- CVE-2026-35580Emissary has GitHub Actions Shell Injection via Workflow InputsMaven · gov.nsa.emissary:emissary · fixed in 8.39.0
- CVE-2026-35571Emissary has Stored XSS via Navigation Template Link InjectionMaven · gov.nsa.emissary:emissary · fixed in 8.39.0
- CVE-2026-35526Strawberry GraphQL affected by a Denial of Service via unbounded WebSocket subscriptionsPyPI · strawberry-graphql · fixed in 0.312.3
- CVE-2026-33816CVE-2026-33816 in github.com/jackc/pgxGo · github.com/jackc/pgx/v5 · fixed in 5.9.0
- CVE-2026-33815CVE-2026-33815 in github.com/jackc/pgxGo · github.com/jackc/pgx/v5 · fixed in 5.9.0
- CVE-2026-35515@nestjs/core Improperly Neutralizes Special Elements in Output Used by a Downstream Component ('Injection')npm · @nestjs/core · fixed in 11.1.18
- CVE-2026-35492Kedro-Datasets has a path traversal vulnerability in PartitionedDataset allows arbitrary file writePyPI · kedro-datasets · fixed in 9.3.0
- CVE-2026-35490changedetection.io has an Authentication Bypass via Decorator OrderingPyPI · changedetection-io · fixed in 0.54.8
- CVE-2026-35480go-ipld-prime's DAG-CBOR decoder unbounded memory allocation from CBOR headersGo · github.com/ipld/go-ipld-prime · fixed in 0.22.0
- CVE-2026-35464pyLoad has an incomplete fix for CVE-2026-33509: unprotected storage_folder enables arbitrary file write to Flask session store and code executionPyPI · pyload-ng
- CVE-2026-35463pyLoad has Improper Neutralization of Special Elements used in an OS CommandPyPI · pyload-ng · fixed in 0.5.0b3.dev97
- CVE-2026-4740Rhacm: open cluster management (ocm): cross-cluster privilege escalation via improper kubernetes client certificate renewal validationGo · open-cluster-management.io/ocm · fixed in 1.2.1
- CVE-2026-35458Gotenberg has a ReDoS via extraHttpHeaders scope featureGo · github.com/gotenberg/gotenberg/v7, github.com/gotenberg/gotenberg/v8 · fixed in 8.30.0
- CVE-2026-33034Potential denial-of-service vulnerability in ASGI requests via memory upload limit bypassPyPI · django · fixed in 4.2.30, 5.2.13, 6.0.4
- CVE-2026-33033Potential denial-of-service vulnerability in MultiPartParser via base64-encoded file uploadPyPI · django · fixed in 4.2.30, 5.2.13, 6.0.4
- CVE-2026-4292Privilege abuse in ModelAdmin.list_editablePyPI · django · fixed in 6.0.4, 5.2.13, 4.2.30
- CVE-2026-4277Privilege abuse in GenericInlineModelAdminPyPI · django · fixed in 4.2.30, 5.2.13, 6.0.4
- CVE-2026-35457libp2p-rust has unbounded rendezvous DISCOVER cookies enable remote memory exhaustioncrates.io · libp2p-rendezvous · fixed in 0.17.1
- CVE-2026-3902ASGI header spoofing via underscore/hyphen conflationPyPI · django · fixed in 4.2.30, 5.2.13, 6.0.4
- CVE-2026-35405libp2p-rendezvous: Unlimited namespace registrations per peer enables OOM DoS on rendezvous serverscrates.io · libp2p-rendezvous · fixed in 0.17.1
- CVE-2026-35554Apache Kafka Clients: Kafka Producer Message Corruption and Misrouting via Buffer Pool Race ConditionMaven · org.apache.kafka:kafka-clients · fixed in 3.9.2, 4.0.2, 4.1.2
- CVE-2026-33866Authorization Bypass in MLflow AJAX EndpointPyPI · mlflow · fixed in 3.11.0rc0
- CVE-2026-33865Stored XSS via unsafe YAML parsing in MLflowPyPI · mlflow · fixed in 3.11.0rc0, 3.11.1
- CVE-2026-33227Apache ActiveMQ Client, Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ Web, Apache ActiveMQ: Improper Limitation of a Pathname to a Restricted Classpath DirectoryMaven · org.apache.activemq:activemq-all, org.apache.activemq:activemq-broker +2 · fixed in 5.19.3, 6.2.2
- CVE-2026-34197Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Authenticated users could perform RCE via Jolokia MBeansMaven · org.apache.activemq:activemq-all, org.apache.activemq:activemq-broker · fixed in 5.19.5, 6.2.3
- CVE-2026-1114Improper Access Control via Weak JWT Token in parisneo/lollmsPyPI · lollms · fixed in 2.2.0
- CVE-2026-1839Arbitrary Code Execution via Unsafe torch.load() in Trainer Checkpoint Loading in huggingface/transformersPyPI · transformers · fixed in 5.0.0, 5.0.0rc3