Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- GO-2026-6836SiYuan: The publish filter for local storage returns the administrator's entire storage map with only three keys sanitized in…Go · github.com/siyuan-note/siyuan/kernel · fixed in 0.0.0-20260729005258-4daee87d4152
- GO-2026-6838Echo: WebSocket proxy can retain connections and handlers after client disconnect in github.com/labstack/echoGo · github.com/labstack/echo/v4, github.com/labstack/echo/v5 · fixed in 4.16.1, 5.4.1
- GO-2026-6839Echo: Rejected WebSocket upgrades can bypass Echo route-level access controls in github.com/labstack/echoGo · github.com/labstack/echo/v4, github.com/labstack/echo/v5 · fixed in 4.16.1, 5.4.1
- GO-2026-6840Echo: BodyDump captures request and response bodies without size limits in v4 in github.com/labstack/echoGo · github.com/labstack/echo/v4 · fixed in 4.16.1
- GO-2026-6841Echo: X-Real-IP extractor trusts the header value instead of the sending peer in github.com/labstack/echoGo · github.com/labstack/echo/v5 · fixed in 5.4.1
- GO-2026-6842Echo: Decompress permits unbounded gzip expansion in v4 in github.com/labstack/echoGo · github.com/labstack/echo/v4 · fixed in 4.16.1
- CVE-2026-88982Kubeflow Pipelines: Cross-tenant execution-cache poisoning / output substitution via a namespace-blind cache key in the cache webhook…Go · github.com/kubeflow/pipelines · fixed in 0.0.0-20260910172610-620d0cc89ae0
- CVE-2026-77596Kubeflow Pipelines API server lacks authorization for shared pipeline uploadsGo · github.com/kubeflow/pipelines · fixed in 0.0.0-20260909234119-62516d8c525f
- CVE-2026-88984Kubeflow Pipelines: RBAC bypass on shared pipelines allows any authenticated user to delete or modify global pipelinesGo · github.com/kubeflow/pipelines · fixed in 0.0.0-20260420170029-186dd1f3b040
- CVE-2026-88986Kubeflow Pipelines: Reflected XSS in the frontend pod information and events error responsesGo · github.com/kubeflow/pipelines · fixed in 0.0.0-20251010122814-fedc25e3f725
- CVE-2026-88985Kubeflow Pipelines: SQL injection through unvalidated pagination tokens in Kubeflow Pipelines API serverGo · github.com/kubeflow/pipelines · fixed in 0.0.0-20260403210607-ac3a4c65677a
- CVE-2026-88983Kubeflow Pipelines — API server fetches a caller-supplied pipelineURL without host validationGo · github.com/kubeflow/pipelines · fixed in 0.0.0-20260517162502-504d7797c1e0
- CVE-2026-58273Rucio: Authorisation Bypass on REST API endpoint for signing URLsPyPI · rucio · fixed in 35.9.0, 38.6.0, 41.0.0rc1
- CVE-2026-112908filelock: StrictSoftFileLock creates its claim directories without the lock mode, so another local user with a write bit on them can end a…PyPI · filelock · fixed in 4.2.1
- CVE-2026-112938filelock: StrictSoftFileLock follows a symbolic link swapped in at <path>.filelock and creates claim files in a directory another local…PyPI · filelock · fixed in 4.2.1
- CVE-2026-112907filelock: On Windows an oplock on a soft lock's marker holds SoftFileLock.acquire() past its timeout and blocks the stale breakPyPI · filelock · fixed in 4.2.1
- CVE-2026-112913filelock: ReadWriteLock on Windows acts on SQLite side files another local user places beside its databasePyPI · filelock · fixed in 4.2.1
- CVE-2026-112910filelock: WindowsFileLock ignores mode: a 0o600 lock file and the ReadWriteLock database inherit the directory ACLPyPI · filelock · fixed in 4.2.1
- CVE-2026-33944Dolibarr: SQL Injection in societe/class/societe.class.php via localtax1_value parameterPackagist · dolibarr/dolibarr · fixed in 22.0.5, 23.0.2
- CVE-2026-111768Model Context Protocol TypeScript SDK: One HTTP request within the default size limit could exhaust server memory during validationnpm · @modelcontextprotocol/sdk, @modelcontextprotocol/server · fixed in 1.32.0, 2.3.0
- CVE-2026-111769Model Context Protocol TypeScript SDK: HTTP client transports and OAuth requests followed cross-origin redirects and re-sent custom…npm · @modelcontextprotocol/client, @modelcontextprotocol/sdk · fixed in 2.3.0, 1.32.0
- CVE-2026-111771Model Context Protocol TypeScript SDK: Server bearer authentication accepted tokens issued for another servicenpm · @modelcontextprotocol/express, @modelcontextprotocol/sdk +2 · fixed in 2.0.2, 1.32.0, 2.3.0 and more
- CVE-2026-49272OAuthLib: Bearer token can be retrieved as long as client knows a valid client ID for device workflowPyPI · oauthlib · fixed in 4.0.0
- CVE-2026-77463Remark42: Rate limit bypass via unconditional trust of X-Forwarded-For/X-Real-IP headers in direct-internet deploymentGo · github.com/umputun/remark42, github.com/umputun/remark42/backend · fixed in 1.16.2
- CVE-2026-77622Sliver: Unauthenticated Memory Exhaustion Denial of Service in Sliver HTTP(S) Listener PNG DecoderGo · github.com/bishopfox/sliver · fixed in 1.7.6
- CVE-2026-48705MONAI: MONAILabel Server Crash and Silent Inference Corruption via Crafted DICOM (pydicom DS/IS Validation Bypass)PyPI · monai · fixed in 1.6.1
- CVE-2026-112902Pillow: Memory disclosure and segfault in libtiff encoder via crafted TIFF tagsPyPI · pillow · fixed in 13.0.0
- CVE-2026-114604GraphQL Tools: Prototype pollution in mergeIncrementalResult via non-primitive path segmentsnpm · @graphql-tools/utils · fixed in 12.0.2
- CVE-2026-112899Pillow: EPS load(scale) lets Ghostscript render past the decompression bomb limitPyPI · pillow · fixed in 13.0.0
- CVE-2026-54442NationalSecurityAgency/emissary: Incomplete fix for CVE-2026-35571: SSRFMaven · gov.nsa.emissary:emissary · fixed in 8.51.0