Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-107300msgpack5: Many buffered values can exhaust the streaming decoder stacknpm · msgpack5 · fixed in 6.1.0
- CVE-2026-107299msgpack5: Reserved byte can cause unbounded stream bufferingnpm · msgpack5 · fixed in 6.1.0
- CVE-2026-107298msgpack5: Deeply nested input can exhaust the decoder stacknpm · msgpack5 · fixed in 6.1.0
- CVE-2026-107297msgpack5: Quadratic parsing in the streaming decodernpm · msgpack5 · fixed in 6.1.0
- CVE-2026-107296msgpack5: Decoding negative int64 values mutates the input buffernpm · msgpack5 · fixed in 6.1.0
- CVE-2026-107295`pydantic-ai-slim` web UI `/api/chat` accepts browser-simple cross-origin requests that can trigger agent tool executionPyPI · pydantic-ai, pydantic-ai-slim · fixed in 1.107.4, 2.28.0
- CVE-2026-107294Pydantic AI: Unbounded memory use when downloading remote content via web_fetch or FileUrlPyPI · pydantic-ai, pydantic-ai-slim · fixed in 1.107.2, 2.24.0
- CVE-2026-107293Pydantic AI OpenTelemetry instrumentation: retry prompt content is not redacted when `include_content=False`PyPI · pydantic-ai, pydantic-ai-slim · fixed in 1.107.4, 2.27.1
- CVE-2026-107292Pydantic AI Web chat UI (`Agent.to_web()`, `clai web`): the local chat endpoint does not validate the `Host` headerPyPI · pydantic-ai, pydantic-ai-slim · fixed in 1.107.5, 2.30.0
- CVE-2026-107291Pydantic AI OpenTelemetry instrumentation: exception events on tool and agent run spans include content when `include_content=False`PyPI · pydantic-ai, pydantic-ai-slim · fixed in 1.107.6, 2.44.0
- CVE-2026-61801github.com/moby/sys/user has a possible DoS via unbounded parsing of user and group database filesGo · github.com/moby/sys/user · fixed in 0.4.1
- CVE-2026-107290Pydantic AI: Event loop blocked by quadratic title extraction in `web_fetch`PyPI · pydantic-ai, pydantic-ai-slim · fixed in 1.107.6, 2.44.0
- CVE-2026-107289Pydantic AI: SSRF cloud-metadata blocklist bypass via IPv6 zone identifier (incomplete fix for CVE-2026-46678 and CVE-2026-48782)PyPI · pydantic-ai, pydantic-ai-slim · fixed in 1.107.6, 2.44.0
- CVE-2026-107287Pydantic AI: Excessive resource use when local web fetching converts nested HTMLPyPI · pydantic-ai, pydantic-ai-slim · fixed in 1.107.7, 2.52.0
- CVE-2026-107286Pydantic AI: Concurrency-limited models can keep their slot when a streamed request ends earlyPyPI · pydantic-ai, pydantic-ai-slim · fixed in 2.53.0
- CVE-2026-105830league/commonmark 2.0.0 before 2.10.2 Quadratic DoS via TableStartParserPackagist · league/commonmark · fixed in 2.10.2
- CVE-2026-105829League CommonMark 1.3.0 before 2.10.2 Stored XSS via DisallowedRawHtml BypassPackagist · league/commonmark · fixed in 2.10.2
- CVE-2026-104634beam_mcp: JSON boolean and null tool arguments reach dispatch as stringsHex · beam_mcp · fixed in 0.10.1
- CVE-2026-88257beam_mcp: nested tool argument constraints advertised but not enforcedHex · beam_mcp · fixed in 0.10.1
- CVE-2026-107285AsyncHttpClient: WebSocket proxy credentials sent to the origin server over a CONNECT tunnelMaven · org.asynchttpclient:async-http-client · fixed in 3.0.12, 2.16.1
- CVE-2026-107283AsyncHttpClient: Digest authentication cnonce generated with a non-cryptographic random sourceMaven · org.asynchttpclient:async-http-client · fixed in 3.0.12, 2.16.1
- CVE-2026-107282AsyncHttpClient: Replay to a different host sends the original host request and credentials to the new hostMaven · org.asynchttpclient:async-http-client · fixed in 3.0.13, 2.16.1
- CVE-2026-107280AsyncHttpClient: Cookie Domain attribute is not checked against the public suffix list, so a cookie can be set for co.ukMaven · org.asynchttpclient:async-http-client · fixed in 3.0.13, 2.16.1
- CVE-2026-107231AsyncHttpClient: Digest challenge without a usable nonce downgrades to Basic and sends the password in cleartextMaven · org.asynchttpclient:async-http-client · fixed in 3.0.13, 2.16.1
- CVE-2026-107230AsyncHttpClient: Pooled connections can still be shared across NTLM, Negotiate and proxy loginsMaven · org.asynchttpclient:async-http-client · fixed in 3.0.14
- CVE-2026-107228AsyncHttpClient CookieStore Silently Overrides Caller's Explicit Cookie Header via setHeader (Bypass of CVE-2024-53990 Fix)Maven · org.asynchttpclient:async-http-client · fixed in 3.0.14
- CVE-2026-107227AsyncHttpClient: Unbounded WebSocket permessage-deflate decompression enables a decompression-bomb denial of service when compression is enabledMaven · org.asynchttpclient:async-http-client · fixed in 3.0.14
- CVE-2026-107225Excelize: GetStyle panics on a negative fillId, borderId or fontId in styles.xmlGo · github.com/xuri/excelize/v2 · fixed in 2.11.1-0.20260731010303-ae2113b410e5
- CVE-2026-107224Excelize: A Zip64 uncompressed-size of 2^63 panics OpenFile/OpenReaderGo · github.com/xuri/excelize/v2 · fixed in 2.11.1-0.20260805032953-db93f8d89de7
- CVE-2026-107223Excelize: Unbounded <col max> attribute is loaded with no MaxColumns check and expanded per-column by flatCols(), so any column mutator hangs or OOMs the processGo · github.com/xuri/excelize/v2 · fixed in 2.11.1-0.20260807015645-a54c578af309