Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-102734asteval sandbox escape: arbitrary native memory read/write via numpy ctypes in default asteval InterpreterPyPI · asteval · fixed in 1.0.9
- CVE-2026-102832JupyterLab: Command link trust prompt in JupyterLab can trust a document other than the one clickedPyPI · jupyterlab, jupyterlite-core +1 · fixed in 4.6.4, 4.5.11, 0.8.4 and more
- CVE-2026-106108Quasar Framework: App Vite SSG page output paths can escape the configured distribution directorynpm · @quasar/app-vite · fixed in 3.3.0
- CVE-2026-103028SFTPGo source-side file-pattern filter bypass during copy operationsGo · github.com/drakkan/sftpgo, github.com/drakkan/sftpgo/v2 · fixed in 2.7.6
- CVE-2026-77375SFTPGo: Denial of service via malformed SSH channel requestGo · github.com/drakkan/sftpgo, github.com/drakkan/sftpgo/v2 · fixed in 2.7.5
- CVE-2026-102342ammonia allows stored XSS through unsanitized SVG animate and set attributescrates.io · ammonia · fixed in 3.3.3, 4.0.3, 4.1.4
- CVE-2026-102603Gotify: Insufficiently Protected Password Change endpointGo · github.com/gotify/server, github.com/gotify/server/v2 +1 · fixed in 3.0.0
- CVE-2026-77361obsidian-tc symlink path mismatch bypasses read ACL restrictionsnpm · obsidian-tc · fixed in 1.3.1
- CVE-2026-77362obsidian-tc bridge tools expose data outside the read ACLnpm · obsidian-tc · fixed in 1.3.1
- CVE-2026-109956NLTK through 3.10.3 Path Traversal via WekaClassifier Model PathPyPI · nltk · fixed in 3.10.4
- CVE-2026-109955Hono 4.12.4 before 4.13.11 Middleware Bypass via serveStatic Double Decodingnpm · hono · fixed in 4.13.11
- CVE-2026-107832fastify vulnerable to header validation bypass via case-sensitive propertyNamesnpm · fastify · fixed in 5.12.6
- CVE-2026-63316SQL Injection in Payload CMSnpm · @payloadcms/db-d1-sqlite, @payloadcms/db-postgres +2 · fixed in 3.90.0, 4.0.0-canary.34, 3.73.0
- CVE-2026-84312Nginx UI: Casdoor SSO callback uses a constant `state` parameter (login CSRF)Go · github.com/0xjacky/nginx-ui · fixed in 1.9.10-0.20260703131214-23d1934099b0
- CVE-2026-84360Nginx UI: OTP secure-session step-up can be bypassed via MCP configuration toolsGo · github.com/0xjacky/nginx-ui · fixed in 1.9.10-0.20260703131214-23d1934099b0
- CVE-2026-84316Nginx UI: nginx config directive denylist (ValidateConfigFile) is bypassable via same-line ";" separation → authenticated directive injection (RCE on the official image)Go · github.com/0xjacky/nginx-ui · fixed in 1.9.10-0.20260703131214-23d1934099b0
- CVE-2026-84319Nginx UI: MCP configuration tools bypass restricted directive validation and allow secondary authenticated users to execute NJS in Nginx worker contextGo · github.com/0xjacky/nginx-ui · fixed in 1.9.10-0.20260703131214-23d1934099b0
- CVE-2026-84317Nginx UI: MCP nginx_config_add skips config directive validation → authenticated nginx directive injection (RCE on the official image)Go · github.com/0xjacky/nginx-ui · fixed in 1.9.10-0.20260703131214-23d1934099b0
- CVE-2026-84313Nginx UI: TOTP / passkey enrolment requires no re-authentication, enabling persistent account takeoverGo · github.com/0xjacky/nginx-ui, nginx-ui · fixed in 1.9.10-0.20260703131214-23d1934099b0
- CVE-2026-84321Nginx UI: Standalone short tokens survive administrative revocation in cache and authenticate again after account re-enableGo · github.com/0xjacky/nginx-ui · fixed in 1.9.10-0.20260703131214-23d1934099b0
- CVE-2026-84314Nginx UI: Account Takeover via Missing `RequireSecureSession` on User Management EndpointGo · github.com/0xjacky/nginx-ui · fixed in 1.9.10-0.20260703131214-23d1934099b0
- CVE-2026-84320Nginx UI: Auto backup name allows path traversal outside validated storage pathGo · github.com/0xjacky/nginx-ui · fixed in 1.9.10-0.20260715121709-f92218e01054
- CVE-2026-84318Nginx UI: MCP `nginx_config_add` Bypasses Directive Validation — Authenticated RCEGo · github.com/0xjacky/nginx-ui · fixed in 1.9.10-0.20260703131214-23d1934099b0
- CVE-2026-106495Backstage: Improper access control in backend action invocationnpm · @backstage/backend-defaults · fixed in 0.17.8
- CVE-2026-84315Nginx UI OTP secure-session step-up is missing on sensitive mutation routesGo · github.com/0xjacky/nginx-ui · fixed in 1.9.10-0.20260703131214-23d1934099b0
- CVE-2026-41508OWASP Coraza WAF: Truncated multipart body bypasses MULTIPART_STRICT_ERROR (rule 200003) via silent io.ErrUnexpectedEOF handlingGo · github.com/corazawaf/coraza, github.com/corazawaf/coraza/v2 +1 · fixed in 3.8.0
- CVE-2026-41504OWASP Coraza WAF: Native audit-log format allows CRLF injection and log forgery via request body and header fieldsGo · github.com/corazawaf/coraza, github.com/corazawaf/coraza/v2 +1 · fixed in 3.8.0
- CVE-2026-104774OWASP Coraza WAF: jsDecode Off-by-One in Octal Escape Handling Enables WAF BypassGo · github.com/corazawaf/coraza, github.com/corazawaf/coraza/v2 +1 · fixed in 3.8.0
- CVE-2026-41510OWASP Coraza WAF: Silent argument drop at ArgumentLimit allows bypass of ARGS-targeted rules via parameter floodingGo · github.com/corazawaf/coraza, github.com/corazawaf/coraza/v2 +1 · fixed in 3.8.1
- CVE-2026-95838containerd: Unpack DoS via repeated opaque whiteoutsGo · github.com/containerd/containerd, github.com/containerd/containerd/v2 · fixed in 1.7.35, 2.0.12, 2.2.8 and more