Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- GHSA-6F2X-V7Q7-M7M5hickory-resolver follows irrelevant CNAME recordscrates.io · hickory-resolver · fixed in 0.26.2
- GHSA-6W6G-HM98-MHGMhickory-resolver: Unbounded TC-retry loop in `NameServerPool::try_send` (resource-exhaustion DoS)crates.io · hickory-resolver · fixed in 0.26.2
- CVE-2026-105758vLLM: Qwen2-VL / Qwen3-VL video samplers bound on request-controlled max_frames, which the num_frames ceiling does not reachPyPI · vllm · fixed in 0.30.0
- CVE-2026-105757vLLM: Structured-output request errors escape the request boundary and terminate the shared EngineCore — engine-fatal denial of service (3 sites)PyPI · vllm · fixed in 0.30.0
- CVE-2026-105756vLLM: Loose `cache_salt` validation lets a single request kill EngineCore on LMCache-MP deployments — uncaught downstream `ValueError` denial of servicePyPI · vllm · fixed in 0.30.0
- CVE-2026-105755vLLM: Flash late-interaction scoring caches query embeddings under a caller-controlled request id — cross-request integrity break and induced errors on `/score` and `/rerank`PyPI · vllm · fixed in 0.30.0
- CVE-2026-105754vLLM: Scale-out disaggregated multimodal transport trusts caller-supplied featuresPyPI · vllm · fixed in 0.30.0
- CVE-2026-105753vLLM: Mirrored multimodal IPC caches desync after a rejected request — a later request reusing the same media hash trips a receiver assertion in the engine corePyPI · vllm · fixed in 0.28.0
- CVE-2026-105752vLLM: Harmony tool continuations drop `cache_salt` — restoring a cross-tenant prefix-cache membership oraclePyPI · vllm · fixed in 0.30.0
- CVE-2026-105751Docling: Arbitrary local file read via draw:image xlink:href in the OpenDocument backendPyPI · docling · fixed in 2.120.3
- CVE-2026-105750Docling: `enable_local_fetch` is not enforced in HTML browser-rendering modePyPI · docling, docling-slim · fixed in 2.118.1
- CVE-2026-105749Docling: Unbounded table rowspan/colspan in HTML, JATS, ODS and BoxNote backends causes CPU/memory exhaustionPyPI · docling, docling-slim · fixed in 2.131.0
- CVE-2026-105748Docling: Crafted DoclingDocument JSON embeds local image files into converted outputPyPI · docling, docling-slim · fixed in 2.131.0
- CVE-2026-105747Docling: METS-GBS archive member limit enforced after full member enumeration (memory exhaustion during format detection)PyPI · docling, docling-slim · fixed in 2.131.0
- CVE-2026-105746Docling: KServe v2 OCR engine does not enforce enable_remote_servicesPyPI · docling · fixed in 2.131.0
- CVE-2026-105745Docling: Plugin entry points are imported before the allow_external_plugins checkPyPI · docling, docling-slim · fixed in 2.131.0
- CVE-2026-105744Docling: Arbitrary file read/write (and command execution when shell-escape is enabled) when rendering untrusted TikZ with the opt-in Tectonic enginePyPI · docling, docling-slim · fixed in 2.132.0
- CVE-2026-105743Docling: SSRF guard bypass in remote resource fetching (DNS rebinding / multi-record resolution; no IP validation in HTML render mode)PyPI · docling, docling-slim · fixed in 2.132.0
- CVE-2026-105742Docling: Configured HTTP headers sent to every remote image host named by a documentPyPI · docling, docling-slim · fixed in 2.132.0
- CVE-2026-105741Langflow: IP Spoofing Bypass via `X-Forwarded-For` Allowing Remote Configuration WritePyPI · langflow · fixed in 1.10.3
- CVE-2026-105699Langflow: Authenticated Cross-Project File Disclosure via Unscoped MCP Resource HandlersPyPI · langflow · fixed in 1.9.1
- CVE-2026-105698Langflow: Cross-user flow access and vertex execution via deprecated /api/v1/build/{flow_id}/vertices endpointsPyPI · langflow, langflow-base · fixed in 1.10.1, 0.10.1
- CVE-2026-105697Langflow: OS command injection (RCE) via arbitrary command in MCP stdio server configurationPyPI · langflow, langflow-base +1 · fixed in 1.10.3, 0.10.3
- CVE-2026-105683Ghost: Path Traversal Vulnerability in Ghost ImageSize Servicenpm · ghost · fixed in 6.27.0
- CVE-2026-105682Ghost: Server-Side Request Forgery in Webhook Triggernpm · ghost · fixed in 6.27.0
- CVE-2026-105681Ghost: Authorization Bypass in Comments Featurenpm · ghost · fixed in 6.44.1
- CVE-2026-105680Ghost: Authorization Issue Allowed Author Role to Delete any Postnpm · ghost · fixed in 6.60.0
- CVE-2026-105679Ghost: Stored XSS via File Uploads on Local Storagenpm · ghost · fixed in 6.64.0
- CVE-2026-105678Ghost: Editors Could Promote Staff Users to Their Own Rolenpm · ghost · fixed in 6.64.0
- CVE-2026-94201Filtering an :atom attribute with unsafe_to_atom? can exhaust the BEAM atom table in AshHex · ash · fixed in 3.34.3