Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-113730OGNL stricter-invocation block list bypass via java.lang.reflect reflection proxiesMaven · ognl:ognl · fixed in 3.4.13
- CVE-2026-113729Moov signedxml: Unauthenticated denial of service in exclusive XML canonicalizationGo · github.com/moov-io/signedxml · fixed in 1.4.1
- CVE-2026-113727OpenChoreo: Authorization bypass on WorkflowRun update allows cross-project takeover of workflow runsGo · github.com/openchoreo/openchoreo · fixed in 1.0.6, 1.1.7, 1.2.5
- CVE-2026-111758markdown-it: Quadratic-time rendering of a single multi-line link reference definition with default options (regression since 14.0)npm · markdown-it · fixed in 14.3.3, 15.0.3
- CVE-2026-113725virtualenv bash activate runs commands from an environment name with a backslash before $PyPI · virtualenv · fixed in 21.14.7
- CVE-2026-113724virtualenv: Deletion recovery can change a symlink target's modePyPI · virtualenv · fixed in 21.14.9
- CVE-2026-113723virtualenv: Bash prompt values can change meaning under older compatibility modesPyPI · virtualenv · fixed in 21.14.9
- CVE-2026-113722virtualenv: Generated POSIX console launchers interpret destination paths as shell syntaxPyPI · virtualenv · fixed in 21.14.9
- CVE-2026-113721virtualenv: Generated files can follow existing destination linksPyPI · virtualenv · fixed in 21.14.9
- CVE-2026-113720virtualenv: Seeded files retain permissions from an older cachePyPI · virtualenv · fixed in 21.14.9
- CVE-2026-113715virtualenv: Venv configuration readback can reinterpret path boundariesPyPI · virtualenv · fixed in 21.14.9
- CVE-2026-113719virtualenv: Seed replacement does not contain metadata deletion pathsPyPI · virtualenv · fixed in 21.14.9
- CVE-2026-113718virtualenv: Xonsh activation literals depend on the script decoding codecPyPI · virtualenv · fixed in 21.14.9
- CVE-2026-113717virtualenv: Pip seeding with download omits wheel digest verificationPyPI · virtualenv · fixed in 21.14.9
- CVE-2026-113716virtualenv: Builtin creation follows linked environment directoriesPyPI · virtualenv · fixed in 21.14.9
- CVE-2026-113712Cachet has Stored XSS in Incident ComponentPackagist · cachethq/cachet
- CVE-2026-113714virtualenv: Downloaded wheel selection and caching precede verificationPyPI · virtualenv · fixed in 21.14.9
- CVE-2026-113713virtualenv: Temporary app-data can leave dangling seed package linksPyPI · virtualenv · fixed in 21.14.10
- CVE-2026-111767MCP TypeScript SDK: Experimental tasks were not tied to the session that created themnpm · @modelcontextprotocol/sdk · fixed in 1.32.0
- CVE-2026-111756follow-redirects array-form headers bypass cross-origin credential strippingnpm · follow-redirects · fixed in 1.16.1
- CVE-2026-113711ApostropheCMS: Unauthenticated resource exhaustion via pre-auth aposBigUpload processing in @apostrophecms/import-exportnpm · @apostrophecms/import-export, apostrophe · fixed in 3.7.0, 4.33.0
- CVE-2026-113710ApostropheCMS: No Attempt Throttling on Authenticated Password-Change Endpoint Enables Unlimited Current-Password Guessingnpm · apostrophe · fixed in 4.33.0
- CVE-2026-113671ApostropheCMS: Host header controls server-side image fetch origin in @apostrophecms/ai-helper, enabling authenticated SSRFnpm · @apostrophecms/ai-helper · fixed in 1.0.0-beta.13
- CVE-2026-113669ApostropheCMS: Cross-domain session token in URL confers session takeovernpm · @apostrophecms/passport-bridge, apostrophe · fixed in 1.6.1, 4.33.0
- CVE-2026-113667ApostropheCMS: CAPTCHA response token not URL-encodednpm · @apostrophecms/form, @apostrophecms/login-hcaptcha +1 · fixed in 1.5.5, 1.3.0, 1.2.1
- CVE-2026-113668ApostropheCMS: :_id/locales REST route omits the public-API authorization gate its sibling read routes enforce (unauthenticated doc-existence + locale metadata disclosure)npm · apostrophe · fixed in 4.33.0
- CVE-2026-113666ApostropheCMS: Authenticated projection-exclusion prototype-member deletion in @apostrophecms/db-connect causes process-wide denial of servicenpm · @apostrophecms/db-connect, apostrophe · fixed in 1.1.0, 4.33.0
- CVE-2026-113665ApostropheCMS: Missing Authorization on Notification PATCH/DELETE Endpointsnpm · apostrophe · fixed in 4.33.0
- CVE-2026-113664ApostropheCMS import-export tar guard misses './..' because it is a literal '../' substring testnpm · @apostrophecms/import-export · fixed in 3.7.0
- CVE-2026-113662ApostropheCMS import-export: NoSQL injection via update-key value lets a crafted import match and overwrite an unidentified documentnpm · @apostrophecms/import-export · fixed in 3.7.0