Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-96620Claude Agent SDK: Argument Injection via resume Option Allows Arbitrary Command ExecutionPyPI · claude-agent-sdk · fixed in 0.2.121
- CVE-2026-109461Microsoft Authentication Library (MSAL) for Node.js Information Disclosure Vulnerabilitynpm · @azure/msal-node · fixed in 7.1.0
- CVE-2026-102941gomarkdown/markdown IsSafeURL panics on short URLsGo · github.com/gomarkdown/markdown · fixed in 0.0.0-20260724235538-61af6e1e6971
- RUSTSEC-2026-0391Data from an abandoned stream leaks into the next stream on a reused contextcrates.io · zstd · fixed in 0.14.3
- RUSTSEC-2026-0392Uninitialized memory exposed by `write::Decoder` on a corrupt legacy framecrates.io · zstd · fixed in 0.8.0
- RUSTSEC-2026-0393Out-of-bounds read when training a dictionary from inconsistent sample sizescrates.io · zstd · fixed in 0.4.10
- RUSTSEC-2026-0395Use-after-free with `CParameter::StableInBuffer`crates.io · zstd-safe · fixed in 8.2.0
- RUSTSEC-2026-0396`Seekable` reads a NULL or out-of-bounds seek tablecrates.io · zstd-safe · fixed in 8.2.0
- RUSTSEC-2026-0397`OutBuffer::around_pos` exposes uninitialized memorycrates.io · zstd-safe · fixed in 8.2.0
- RUSTSEC-2026-0398`Seekable::decompress` sets a `Vec` length beyond its capacity for offsets past the endcrates.io · zstd-safe · fixed in 8.2.0
- RUSTSEC-2026-0399Use-after-free through `init_using_cdict` and `init_using_ddict`crates.io · zstd-safe · fixed in 8.2.0
- RUSTSEC-2026-0400Use-after-free of a dictionary after a one-shot call on a context with an open streamcrates.io · zstd-safe · fixed in 8.2.0
- RUSTSEC-2026-0401Out-of-bounds read in `train_from_buffer` when sample sizes overflowcrates.io · zstd-safe · fixed in 8.2.0
- RUSTSEC-2026-0402Heap buffer overflow in `CCtx::try_clone` on a multithreaded contextcrates.io · zstd-safe · fixed in 8.2.0
- RUSTSEC-2026-0403Uninitialized memory exposed when streaming decompression of a legacy frame failscrates.io · zstd-safe · fixed in 7.4.0, 8.2.0
- RUSTSEC-2026-0404Double free in `DCtx::try_clone`crates.io · zstd-safe · fixed in 8.2.0
- RUSTSEC-2026-0405Out-of-bounds read with an out-of-range `InBuffer::pos`crates.io · zstd-safe · fixed in 8.2.0
- RUSTSEC-2026-0406Use-after-free when changing a multithreaded context with an unfinished framecrates.io · zstd-safe · fixed in 8.2.0
- RUSTSEC-2026-0410WebAssembly allocator shim corrupts memory on allocation failurecrates.io · zstd-sys · fixed in 2.1.2
- CVE-2026-111171Web3.py 7.15.0 through 7.16.0 and 8.0.0b2 through 8.0.0 CCIP-Read SSRF BypassPyPI · web3 · fixed in 7.15.0, 8.0.0b2
- CVE-2026-111170kedro-datasets 9.3.0 through 9.6.0 Path Traversal via MatplotlibDataset Plot NamePyPI · kedro-datasets · fixed in 9.3.0
- CVE-2026-62322Python Social Auth: Login CSRF in LINE backend (LineOAuth2) — missing OAuth state validation (incomplete fix of 5.0.0 campaign)PyPI · social-auth-core · fixed in 5.0.2
- CVE-2026-109932undici WebSocket client vulnerable to Denial of Service via unbounded automatic PONG bufferingnpm · undici · fixed in 6.29.1, 7.30.1, 8.12.2
- CVE-2026-104150AdonisJS HTTP Server: Uncontrolled Resource Consumption and Inefficient Regular Expression Complexitynpm · @adonisjs/http-server · fixed in 9.1.1, 8.2.2
- CVE-2026-57496NetLicensing MCP Server: REST Path Traversal Bypasses Token RedactionPyPI · netlicensing-mcp · fixed in 0.1.8
- CVE-2026-87018undici vulnerable to Denial of Service via TLS 1.2 certificate-changing renegotiationnpm · undici · fixed in 6.29.1, 7.30.1, 8.12.2
- CVE-2026-105660Unvalidated HTTP/1 request-target authority lets a client choose conn.host and conn.port in BanditHex · bandit · fixed in 1.13.0
- CVE-2026-92707MessagePack: Nested arrays can blow past buffer length limitsNuGet · messagepack · fixed in 2.5.303, 3.1.9
- CVE-2026-109383undici vulnerable to TLS certificate validation bypass via dropped tls options in Agentnpm · undici · fixed in 6.29.1, 7.30.1, 8.12.2
- CVE-2026-109829undici vulnerable to cache poisoning and cross-user disclosure via cross-origin redirectsnpm · undici · fixed in 7.30.1, 8.12.2