Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-105853Payload: Token refresh and password reset responses may expose restricted user fieldsnpm · payload · fixed in 3.90.0, 4.0.0-canary.34
- CVE-2026-105852Payload relationship-query authorization bypassnpm · payload · fixed in 3.90.0, 4.0.0-canary.34
- CVE-2026-105850Payload: Order confirmation validation issue in Payload Ecommercenpm · @payloadcms/plugin-ecommerce · fixed in 3.90.0, 4.0.0-canary.34
- CVE-2026-105849Payload: API key disclosure through ordinary document readsnpm · payload · fixed in 3.90.0, 4.0.0-canary.34
- CVE-2026-104850MCP TypeScript SDK: OAuth client could send credentials to an authorization server chosen by the MCP servernpm · @modelcontextprotocol/client, @modelcontextprotocol/sdk · fixed in 2.2.0, 1.31.0
- CVE-2026-105848Payload: Insufficient Access Control in Stripe REST Proxynpm · @payloadcms/plugin-stripe · fixed in 3.90.0, 4.0.0-canary.34
- CVE-2026-105847Payload: Polymorphic join queries could disclose hidden fieldsnpm · payload · fixed in 3.90.0, 4.0.0-canary.34
- CVE-2026-105846Payload: Untrusted redirect URL parameter exploitnpm · @payloadcms/next, payload · fixed in 3.88.0, 4.0.0-canary.27
- CVE-2026-105845Payload: SQL Injection in SQLite and Postgresnpm · payload · fixed in 3.88.0, 4.0.0-canary.27
- CVE-2026-105844Payload: Prototype pollution in Payload Import Export pluginnpm · @payloadcms/plugin-import-export · fixed in 3.88.0, 4.0.0-canary.27
- CVE-2026-105806Payload: Improper access control for MCP API keysnpm · @payloadcms/plugin-mcp · fixed in 3.88.0
- CVE-2026-26287External Secrets Operator: label enforcement bypass in webhook generator enables secret exfiltrationGo · github.com/external-secrets/external-secrets · fixed in 1.3.2
- CVE-2026-105805Payload: Sort queries could expose protected field informationnpm · payload · fixed in 3.88.0, 4.0.0-canary.27
- CVE-2026-105804Payload: Password hashes use insufficient PBKDF2 iterationsnpm · payload · fixed in 3.90.0, 4.0.0-canary.34
- CVE-2026-105801openapi-python-client: Malicious OpenAPI Documents can cause Arbitrary Code GenerationPyPI · openapi-python-client · fixed in 0.29.1
- CVE-2026-105800i18next-http-backend incomplete URL validation permits SSRFnpm · i18next-http-backend · fixed in 4.0.2
- CVE-2026-105799LangChain: RediSearch Filter Injection via Unescaped Tag/Text Valuesnpm · @langchain/redis · fixed in 1.1.1
- CVE-2026-105922vllm-project vLLM Penalty utils.py get_token_bin_counts_and_mask denial of servicePyPI · vllm · fixed in 0.32.0
- CVE-2026-105796Kiota: Code injection through doc-comment delimiter reformation in Kiota Java and PHP generatorsNuGet · microsoft.openapi.kiota, microsoft.openapi.kiota.builder · fixed in 1.35.0
- CVE-2026-105795Kiota: Unsafe oauth_card_path references in Kiota-generated API plugin manifestsNuGet · microsoft.openapi.kiota, microsoft.openapi.kiota.builder · fixed in 1.35.0
- CVE-2026-105794MsQuic: Improper Certificate Validation in Microsoft.Native.Quic.MsQuic.OpenSSLNuGet · microsoft.native.quic.msquic.openssl · fixed in 2.4.20, 2.5.11, 2.6.1
- CVE-2026-94206Cloak PBKDF2 field ignores the configured iteration count and runs only :size roundsHex · cloak, cloak_ecto · fixed in 1.0.0-alpha.0
- CVE-2026-95105Cloak AES-CTR cipher lacks ciphertext authentication, allowing chosen-plaintext forgery by bit flippingHex · cloak
- CVE-2026-105782Scrapy: Arbitrary Module Import via Referrer-Policy Header in RefererMiddlewarePyPI · scrapy · fixed in 2.14.2
- CVE-2026-105760vLLM: GLMGA video sampling permits request-driven CPU and memory exhaustionPyPI · vllm · fixed in 0.30.0
- CVE-2026-105759vLLM: Unbounded Prometheus label cardinality from attacker-controlled HTTP method tokens in the vLLM Rust frontend metrics middleware (unauthenticated denial of service)PyPI · vllm · fixed in 0.30.0
- CVE-2026-104852GraphQL Tools has prototype pollution in well-established utility function `mergeDeep`npm · @graphql-tools/utils · fixed in 12.0.1
- GHSA-6F2X-V7Q7-M7M5hickory-resolver follows irrelevant CNAME recordscrates.io · hickory-resolver · fixed in 0.26.2
- GHSA-6W6G-HM98-MHGMhickory-resolver: Unbounded TC-retry loop in `NameServerPool::try_send` (resource-exhaustion DoS)crates.io · hickory-resolver · fixed in 0.26.2
- CVE-2026-105758vLLM: Qwen2-VL / Qwen3-VL video samplers bound on request-controlled max_frames, which the num_frames ceiling does not reachPyPI · vllm · fixed in 0.30.0