Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-111764A2A Java SDK has a fail-open default task authorizationMaven · org.a2aproject.sdk:a2a-java-sdk-server-common · fixed in 1.3.0.Final
- CVE-2026-112946Vite: Files outside `server.fs.allow` could be served when project paths match system paths on non-Windows machinenpm · vite, vite-plus · fixed in 8.3.3, 8.2.4, 8.1.6 and more
- CVE-2026-111763A2A Java SDK send client credentials under server-controlled HTTP header name, enabling leakage via redirectMaven · org.a2aproject.sdk:a2a-java-sdk-parent · fixed in 1.3.0.Final
- CVE-2026-112945Vite: Cross origin script execution through Vite custom middlewarenpm · vite, vite-plus · fixed in 8.3.3, 8.2.4, 8.1.6 and more
- CVE-2026-112944launch-editor: Editor CLI flag misinterpretation causing arbitrary command execution for some editorsnpm · launch-editor, vite +1 · fixed in 2.14.2, 8.3.3, 8.2.4 and more
- CVE-2026-111762A2A Java SDK: Push notification credentials logged in cleartext on protobuf parse failureMaven · org.a2aproject.sdk:a2a-java-sdk-transport-rest · fixed in 1.3.0.Final
- CVE-2026-111761A2A Java SDK has Server-Side Request Forgery (SSRF) in push-notification deliveryMaven · org.a2aproject.sdk:a2a-java-sdk-server-common · fixed in 1.3.0.Final
- CVE-2026-112943launch-editor: escapeCmdArgs() omits % escaping on Windowsnpm · launch-editor, vite +1 · fixed in 2.14.2, 8.3.3, 8.2.4 and more
- CVE-2026-112942launch-editor: `fs.existsSync()` existence check can be bypassed on Windowsnpm · launch-editor, vite +1 · fixed in 2.14.2, 8.3.3, 8.2.4 and more
- CVE-2026-112941filelock: SoftReadWriteLock follows a lock tree swapped in after its first acquire and writes lock records into directories of the user running the lockPyPI · filelock · fixed in 4.2.1
- CVE-2026-112940filelock ReadWriteLock: SQLite reopens the lock database by name, so a planted symlink or journal file makes the lock user's process overwrite or unlink its own filesPyPI · filelock · fixed in 4.2.1
- CVE-2026-112939filelock: SoftFileLock removes a live holder's marker when another user forges the PID in a writable markerPyPI · filelock · fixed in 4.2.1
- CVE-2026-112937filelock: ReadWriteLock on the hard-link route deletes any directory another user renames onto its .filelock-* link directory namePyPI · filelock · fixed in 4.2.1
- CVE-2026-112936filelock: ReadWriteLock follows a symlink at the lock path into SQLitePyPI · filelock · fixed in 4.0.9
- CVE-2026-112935filelock: SoftFileLock stale-lock break removes a live lock file on a reused inode number and admits two holdersPyPI · filelock · fixed in 4.2.1
- CVE-2026-112934filelock: SoftReadWriteLock holder refresh writes through a hard link and hangs on a named pipe that another local user renames over its recordPyPI · filelock · fixed in 4.2.1
- CVE-2026-112915filelock ReadWriteLock: a crafted lock database makes every acquire stall or hang regardless of timeoutPyPI · filelock · fixed in 4.2.1
- CVE-2026-112914filelock: SoftFileLock stale-break restore follows a swapped-in symbolic link and hard-links a file of the user running the lock into the lock directoryPyPI · filelock · fixed in 4.2.1
- CVE-2026-112912filelock: Symlink swap during SoftFileLock's writability check leaks whether a path exists and is writable by the lock takerPyPI · filelock · fixed in 4.2.1
- CVE-2026-112911filelock: StrictSoftFileLock and SoftReadWriteLock adopt a protocol directory another user created first, losing mutual exclusionPyPI · filelock · fixed in 4.2.1
- CVE-2026-112909filelock: UnixFileLock truncates and chmods any regular file another user renames or hard-links onto the lock pathPyPI · filelock · fixed in 4.2.1
- CVE-2026-112906filelock: SoftFileLock evicts a fresh lock file whose watched age another local user's pre-dated file passed on through inode reusePyPI · filelock · fixed in 4.2.1
- RUSTSEC-2026-0461Unbounded tool schema cache in Streamable HTTP server transportcrates.io · rmcp · fixed in 3.6.0
- CVE-2026-110725fast-uri vulnerable to scheme injection via an unescaped first-segment colon in suffix referencesnpm · fast-uri · fixed in 2.4.8, 3.1.9, 4.2.3
- CVE-2026-110306fast-uri vulnerable to URI scheme spoofing via percent-encoded scheme decodingnpm · fast-uri · fixed in 2.4.8, 3.1.9, 4.2.3
- CVE-2026-110180fast-uri vulnerable to host confusion via unchecked WHATWG host canonicalizationnpm · fast-uri · fixed in 2.4.8, 3.1.9, 4.2.3
- CVE-2026-110095fast-uri vulnerable to improper path equivalence in relative reference normalizationnpm · fast-uri · fixed in 2.4.8, 3.1.9, 4.2.3
- CVE-2026-105299Pingora forwards client-nominated Connection headers to HTTP/1 upstreams, allowing ACL bypass in specific chained deploymentscrates.io · pingora-proxy · fixed in 0.9.0
- CVE-2026-105298Pingora HTTP/2 :authority and Host header mismatch enables cache poisoning and host-based access control bypasscrates.io · pingora-core · fixed in 0.9.0
- CVE-2026-105297Pingora HTTP/2 server memory exhaustion through unbounded default header-list and concurrent-stream limitscrates.io · pingora-core · fixed in 0.8.1