Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-73802Gitea Runner host isolation bypass through container optionsGo · gitea.com/gitea/runner · fixed in 1.0.9-0.20260731160927-34bfa1915022
- CVE-2026-59766Gitea private repository metadata disclosure after access revocationGo · code.gitea.io/gitea, gitea.dev · fixed in 1.27.0
- CVE-2026-110634git-diff before 2.0.7 OS Command Injection via gitDiff Input Stringsnpm · git-diff · fixed in 2.0.7
- RUSTSEC-2026-0356Panic on erroneous call-to-host from guest realloc callcrates.io · wasmtime · fixed in 48.0.6, 49.0.3
- RUSTSEC-2026-0363Component-model handle tables are capped only per instance and charged to no limitcrates.io · wasmtime · fixed in 36.0.18, 48.0.6, 49.0.3
- RUSTSEC-2026-0364Exception tags can cause host data structures to be unalignedcrates.io · wasmtime · fixed in 48.0.6, 49.0.3
- CVE-2026-104252Vitess vttablet /twopcz reflected XSSGo · vitess.io/vitess · fixed in 0.23.5, 0.24.2
- CVE-2026-56826Shopper: Missing function-level authorization on Settings tax/zone/shipping Livewire components allows a low-privileged user to delete commerce configurationPackagist · shopper/framework · fixed in 2.9.2
- CVE-2026-102599Socket.IO: Engine.IO Protocol Revision Mismatch DoSnpm · engine.io · fixed in 6.6.10
- CVE-2026-86063Claude Code: Plugin Hash Pin Bypass Allows Bypass of Hash Pinningnpm · @anthropic-ai/claude-code · fixed in 2.1.179
- CVE-2026-102870ASP.NET Core Remote Code Execution VulnerabilityNuGet · microsoft.aspnetcore.components.webassembly.server · fixed in 10.0.14, 11.0.0-rc.3.26522.148
- CVE-2026-88092ASP.NET Core Tampering VulnerabilityNuGet · microsoft.aspnetcore.app.runtime.linux-arm, microsoft.aspnetcore.app.runtime.linux-arm64 +9 · fixed in 8.0.32, 10.0.13, 11.0.0-rc.2 and more
- CVE-2026-84994Qwik: Crashing any Qwik Server via Resource thenablenpm · @builder.io/qwik, @qwik.dev/core · fixed in 1.20.0, 2.0.0-beta37
- CVE-2026-70197.NET and Visual Studio Remote Code Execution VulnerabilityNuGet · microsoft.netcore.app.runtime.win-arm64, microsoft.netcore.app.runtime.win-x64 +1 · fixed in 8.0.32, 11.0.0-rc.2, 9.0.21 and more
- CVE-2026-85747Distribution: Client `manifests.Get()` does not verify returned content against requested digestGo · github.com/distribution/distribution, github.com/distribution/distribution/v3 +1 · fixed in 3.1.2
- CVE-2026-94603Podman: The `podman run` command can be instructed to disable almost all sandboxing by image annotationGo · github.com/containers/podman, github.com/containers/podman/v2 +4 · fixed in 5.8.8, 6.1.3
- CVE-2026-104250unstructured: Stored XSS via unescaped HTML generationPyPI · unstructured · fixed in 0.24.1
- CVE-2026-77459Argo CD: AppProject destination-namespace and resource restrictions bypassed by PreDelete/PostDelete resource hooksGo · github.com/argoproj/argo-cd, github.com/argoproj/argo-cd/v2 +1 · fixed in 3.3.15, 3.4.10, 3.5.4 and more
- CVE-2026-82416FrankenPHP: Cross-request PHP session ID leak in worker mode when the session extension is a shared moduleGo · github.com/dunglas/frankenphp · fixed in 1.12.5
- CVE-2026-85990Leantime: Any Authenticated User Can Self-Escalate to Admin via Unauthorized JSON-RPC MethodsPackagist · leantime/leantime · fixed in 3.10.0
- CVE-2026-102989TanStack Router: Unauthenticated reflected XSS in TanStack Start server-function responsesnpm · @tanstack/react-start, @tanstack/solid-start +2 · fixed in 1.168.60, 1.168.57, 1.169.39 and more
- CVE-2026-54641OpenRemote: Cross-Realm User Information Disclosure in UserResourceImplMaven · io.openremote:openremote-manager · fixed in 1.24.2
- CVE-2026-54640OpenRemote: XXE in KNXProtocol.startAssetImport() allows arbitrary file read via unprotected XMLInputFactoryMaven · io.openremote:openremote-agent · fixed in 1.24.2
- CVE-2026-54697ConnectBot SSH: Excessive allocation and integer overflow in DER private-key parsingMaven · org.connectbot.sshlib:sshlib
- CVE-2026-54700ConnectBot SSH: Unbounded SSH field lengths can cause excessive memory allocationMaven · org.connectbot.sshlib:sshlib
- CVE-2026-102672Electron: Local race condition in Squirrel.Mac update installation on macOSnpm · electron · fixed in 39.8.10, 41.10.5, 42.0.0-beta.2
- CVE-2026-101899Axios: CIDR-form NO_PROXY entries are ignored, causing proxy exclusion bypass for internal IP rangesnpm · axios · fixed in 1.20.0
- CVE-2026-49264OAuthLib: Unsafe JSONP callback injection in RevocationEndpoint allows arbitrary JavaScript response generationPyPI · oauthlib · fixed in 4.0.0
- CVE-2026-49265OAuthLib: Timing Attack Vulnerability in PKCE code_verifier ComparisonPyPI · oauthlib · fixed in 4.0.0
- CVE-2026-102734asteval sandbox escape: arbitrary native memory read/write via numpy ctypes in default asteval InterpreterPyPI · asteval · fixed in 1.0.9