Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-106456Backstage: Inconsistent credential enforcement for overlapping proxy routesnpm · @backstage/plugin-proxy-backend · fixed in 0.6.18
- CVE-2026-106455Backstage: Improper validation of MkDocs plugin configuration in TechDocsnpm · @backstage/plugin-techdocs-node · fixed in 1.14.7, 1.15.5
- CVE-2026-106454Twisted: IMAP wildcardToRegexp() ReDoSPyPI · twisted
- CVE-2026-106453yawkat LZ4 Java: LZ4DecompressorWithLength allocates the unvalidated size from the 4-byte length header, so a 5-byte input triggers a 1 GiB allocation and OutOfMemoryErrorMaven · at.yawk.lz4:lz4-java, org.lz4:lz4-java · fixed in 1.11.2
- CVE-2026-106452yawkat LZ4 Java: LZ4BlockInputStream allocates an unvalidated compressed length from the stream headerMaven · at.yawk.lz4:lz4-java, org.lz4:lz4-java · fixed in 1.11.2
- CVE-2026-106451yawkat LZ4 Java: Native library extraction to a shared temporary directory is vulnerable to file replacement by another local userMaven · at.yawk.lz4:lz4-java, org.lz4:lz4-java · fixed in 1.11.4
- CVE-2026-106450yawkat LZ4 Java: LZ4FrameInputStream reallocates block buffers for every frame, allowing CPU and GC amplification from small inputsMaven · at.yawk.lz4:lz4-java, org.lz4:lz4-java · fixed in 1.11.4
- CVE-2026-106449yawkat LZ4 Java: LZ4BlockInputStream with stopOnEmptyBlock=false recurses once per empty block, causing StackOverflowErrorMaven · at.yawk.lz4:lz4-java, org.lz4:lz4-java · fixed in 1.11.4
- CVE-2026-106448StableLib: Prototype poisoning via `__proto__` map keys in CBOR decodingnpm · @stablelib/cbor · fixed in 2.0.3
- CVE-2026-106447StableLib: Stack exhaustion denial of service via deeply nested CBOR arrays, maps, or tagsnpm · @stablelib/cbor · fixed in 2.0.3
- CVE-2026-106446Handlebars: JavaScript Injection via AST Type Confusion in compile (Program.blockParams)npm · handlebars · fixed in 4.7.10
- CVE-2026-106445Handlebars: JavaScript Injection via Own Property Check Bypassnpm · handlebars · fixed in 4.7.10
- CVE-2026-106444Handlebars: JavaScript Injection via Unsafe Inline Embedding of Precompiled Templatesnpm · handlebars · fixed in 4.7.10
- CVE-2026-106443WeasyPrint: EPS images reach the Ghostscript interpreter resulting in RCEPyPI · weasyprint · fixed in 70.0
- CVE-2026-106442Hydra instantiate target blacklist bypasses permit code executionPyPI · hydra-core · fixed in 1.3.6, 1.4.0.dev9
- CVE-2026-106441Hydra logging configuration permits unsafe callable resolutionPyPI · hydra-core · fixed in 1.3.6, 1.4.0.dev9
- CVE-2026-106440Hydra: Optuna custom_search_space can resolve and execute untrusted callables via get_methodPyPI · hydra-optuna-sweeper · fixed in 1.3.0, 1.4.0.dev10
- CVE-2026-106439Hydra: Mutable instantiate policy sets allow target blocklist bypassPyPI · hydra-core · fixed in 1.3.7, 1.4.0.dev10
- CVE-2026-106123RabbitMQ Java client: plaintext broker credentials leaked in exception message from ConnectionFactoryConfigurator.load()Maven · com.rabbitmq:amqp-client · fixed in 5.35.0
- CVE-2026-106122RabbitMQ: Malformed UTF-8 in shortstr properties permanently disables RPC consumersMaven · com.rabbitmq:amqp-client · fixed in 5.36.0
- CVE-2026-106121RabbitMQ: JSONReader in the default JSON-RPC mapper never terminates on truncated input, causing DoSMaven · com.rabbitmq:amqp-client · fixed in 5.36.1
- CVE-2026-106120LiquidJS: ownPropertyOnly bypass for inherited array indices in first/last/join/reverse/slice/compact, `.first`/`.last`, negative index, and for-loop iterationnpm · liquidjs · fixed in 10.27.2
- CVE-2026-106119LangChain: MongoDBChatMessageHistory query injection can allow cross-session accessnpm · @langchain/mongodb · fixed in 1.3.1
- CVE-2026-106118ImageSharp: Tiled fax TIFF: tile buffer sized by TileWidth but fax decompressor writes scanlines of ImageWidth — heap OOB writeNuGet · sixlabors.imagesharp · fixed in 3.2.0, 4.1.1
- CVE-2026-106117ImageSharp: CCITT fax decompression (T4/Modified Huffman): unbounded WriteBits overflows strip buffer — heap OOB write in SixLabors.ImageSharpNuGet · imagesharp · fixed in 3.2.0, 4.1.1
- CVE-2026-106116ImageSharp: BigTIFF IFD count can keep a decoder thread in a non-progressing loopNuGet · sixlabors.imagesharp · fixed in 4.1.2
- CVE-2026-106115ImageSharp: TIFF CCITT T6 encoder writes beyond an undersized output bufferNuGet · sixlabors.imagesharp · fixed in 4.1.2
- CVE-2026-106114ImageSharp: ICC CLUT parsing allocates from unvalidated channel and grid dimensionsNuGet · sixlabors.imagesharp · fixed in 4.1.2, 3.2.0
- CVE-2026-106113ImageSharp: HistogramEqualization uses an unvalidated luminance as an unchecked histogram indexNuGet · sixlabors.imagesharp · fixed in 4.1.2
- CVE-2026-106112ImageSharp: ICC LUT16 output channel count can write beyond Vector4NuGet · sixlabors.imagesharp · fixed in 4.1.2