Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-114096Dulwich 0.24.0 before 1.2.8 Symlink Write-Through via porcelain.checkout pathsPyPI · dulwich · fixed in 1.2.8
- CVE-2026-114095Dulwich before 1.2.9 Infinite Loop DoS via Pack.resolve_objectPyPI · dulwich · fixed in 1.2.9
- CVE-2026-114094Dulwich before 1.2.9 Arbitrary File Write via DOS drive letter pathsPyPI · dulwich · fixed in 1.2.9
- CVE-2026-114088Trigger.dev before 4.5.4 Hardcoded Coordinator Secret Authentication Bypass via Socket.IOnpm · trigger.dev · fixed in 4.5.4
- CVE-2026-114087Trigger.dev before 4.5.6 Authentication Bypass via Hardcoded Default Secretsnpm · trigger.dev · fixed in 4.5.6
- CVE-2026-114086Trigger.dev before 4.5.5 Unauthenticated Realtime Stream Data Injection via Streams Endpointnpm · trigger.dev · fixed in 4.5.5
- CVE-2026-114081Trigger.dev before 4.5.6 Cross-Tenant SQL Injection via TSQL Window-Function Namenpm · trigger.dev · fixed in 4.5.6
- CVE-2026-114079Trigger.dev before 4.5.6 Cross-Environment Deployment Cancel via Cancel Endpointnpm · trigger.dev · fixed in 4.5.6
- CVE-2026-114076Trigger.dev before 4.5.2 Blind SSRF via Alert Channel Webhook URLnpm · trigger.dev · fixed in 4.5.2
- CVE-2026-114073Trigger.dev CLI before 4.5.9 Secret Exposure via Debug Deployment Logsnpm · trigger.dev · fixed in 4.5.9
- CVE-2026-114061SvelteKit before 3.0.0 XSS via Cache-Control Header in Prerendered Pagesnpm · @sveltejs/kit · fixed in 3.0.0
- CVE-2026-114060SvelteKit before 3.0.0 Open Redirect via Enhanced Form Actionsnpm · @sveltejs/kit · fixed in 3.0.0
- CVE-2026-114055vLLM 0.7.3 before 0.31.0 DoS via Unvalidated mm_processor_kwargsPyPI · vllm · fixed in 0.31.0
- CVE-2026-114054vLLM before 0.31.0 Cross-Request Cache Aliasing via EXIF ImageID and Prefix-Cache KeysPyPI · vllm · fixed in 0.31.0
- CVE-2026-114053vLLM 0.7.3 before 0.31.0 RCE via mm_processor_kwargs.code_revisionPyPI · vllm · fixed in 0.31.0
- CVE-2026-114052vLLM 0.25.0 before 0.31.0 MOSS-Audio Memory Exhaustion via /tokenize mm_processor_kwargsPyPI · vllm · fixed in 0.31.0
- CVE-2026-114050vLLM before 0.31.0 Remote Engine Crash via Forged Multimodal UUIDPyPI · vllm · fixed in 0.31.0
- CVE-2021-48020Vyper before 0.3.0 Memory Corruption via Internal Function Calls in ArraysPyPI · vyper · fixed in 0.2.12
- CVE-2021-48019Vyper before 0.2.9 Incorrect RETURNDATASIZE in create_forwarder_to ProxiesPyPI · vyper · fixed in 0.2.9
- CVE-2021-48018Vyper 0.2.13 before 0.2.15 Storage Corruption via @nonreentrant DecoratorPyPI · vyper · fixed in 0.2.15
- CVE-2020-37289Vyper before 0.3.1 Improper Input Validation of uint8 Interface Return ValuesPyPI · vyper
- CVE-2020-37288Vyper 0.1.0b10 before 0.2.3 Invalid Jump Destination via Return in Nested LoopsPyPI · vyper · fixed in 0.2.3
- CVE-2020-37287Vyper before 0.2.6 Call Stack Corruption via Complex Type Function ArgumentsPyPI · vyper · fixed in 0.2.6
- CVE-2020-37286Vyper 0.1.0b4 before 0.3.0 Memory Corruption via Nested Internal Function CallsPyPI · vyper · fixed in 0.2.6
- CVE-2026-113726virtualenv activate runs commands from the environment name in zsh with PROMPT_SUBSTPyPI · virtualenv · fixed in 21.14.4
- CVE-2026-113776virtualenv activation scripts run code from a path that contains a placeholder namePyPI · virtualenv · fixed in 21.14.2
- CVE-2026-113732virtualenv activate.fish runs commands from a path or prompt with a backslash before a quotePyPI · virtualenv · fixed in 21.14.2
- PYSEC-2026-4320certifi bundles emSign root CAs with compromised intermediate CA keysPyPI · certifi · fixed in 2026.10.18
- CVE-2026-113731djust: Arbitrary absolute-path file read in the find_handlers_for_template MCP toolPyPI · djust · fixed in 1.0.10, 1.1.7, 1.2.4 and more
- CVE-2026-113730OGNL stricter-invocation block list bypass via java.lang.reflect reflection proxiesMaven · ognl:ognl · fixed in 3.4.13