Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-105644Ghost: Stored XSS via SVG Files in Content Importsnpm · ghost · fixed in 6.67.0
- CVE-2026-105643Ghost: Stored XSS via Embed Card Previewsnpm · ghost · fixed in 6.67.0
- CVE-2026-105642Ghost: Remote Code Execution via Bookmark Card Imagesnpm · ghost · fixed in 6.67.0
- CVE-2026-102282adm-zip extraction preserves SUID/SGID bits from untrusted ZIPs -> local privilege escalationnpm · adm-zip · fixed in 0.6.1
- CVE-2026-104891mppx-condition-gate: Free-access path grants on a self-declared wallet without proving controlnpm · @insumermodel/mppx-condition-gate, @insumermodel/mppx-token-gate · fixed in 3.0.0, 1.0.4
- CVE-2026-104890Kunstmaan CMS: MediaBundle extension blacklist bypass allows authenticated administrators to upload executable PHP files leading to remote code executionPackagist · kunstmaan/bundles-cms, kunstmaan/media-bundle · fixed in 7.3.2
- CVE-2026-105315django-haystack more_like_this Template Tag elasticsearch_backend.py _to_python eval injectionPyPI · django-haystack · fixed in 3.4.0
- RUSTSEC-2026-0444`astral-tl` is unmaintainedcrates.io · astral-tl
- CVE-2026-105163crossplane crossplane-runtime ImageConfig client.go Get toctouGo · github.com/crossplane/crossplane-runtime/v2 · fixed in 2.4.0-rc.1, 2.3.3
- CVE-2026-104874Multidict: Reference leak in CIMultiDict/MultiDict items-view union and subtractionPyPI · multidict · fixed in 6.9.1
- CVE-2026-104873LangGraph SDK custom auth silently ignores actions= on resource decoratorsPyPI · langgraph-sdk · fixed in 0.4.4
- CVE-2026-103918@orpc/zod: Prototype injection in smart coercionnpm · @orpc/zod · fixed in 1.14.10
- CVE-2026-104872Multiple @opentelemetry/instrumentation-* packages expose database username via unconditional db.user span attributenpm · @opentelemetry/instrumentation-cassandra-driver, @opentelemetry/instrumentation-knex +6 · fixed in 0.66.0, 0.65.0, 0.67.0 and more
- CVE-2026-104871Angular SSR: Path Traversal to Sibling Directories in CommonEngine on Windowsnpm · @angular/ssr · fixed in 22.1.7, 21.2.23, 20.3.36
- CVE-2026-104861probe-image-size: Quadratic-time Denial of Service in the SVG Parsernpm · probe-image-size · fixed in 7.4.0
- CVE-2026-104859Nx: OS command injection in the @nx/docker release pipelinenpm · @nx/docker · fixed in 22.7.8, 23.1.1
- CVE-2026-104855Wasmtime: Preemption and traps during bulk operations enable breaking internal VM statecrates.io · wasmtime · fixed in 46.0.2, 47.0.3
- CVE-2026-104854Nx daemon and plugin worker sockets are accessible to other local usersnpm · nx · fixed in 22.7.9, 23.1.2
- CVE-2026-104853Nx: Path traversal in nx migrate package-migrations extractionnpm · nx · fixed in 22.7.10, 23.2.1
- CVE-2026-104851fsspec: Server-Side Template Injection in ReferenceFileSystem leads to Remote Code ExecutionPyPI · fsspec · fixed in 2026.6.0
- CVE-2026-104849Tinypool: Prototype Pollution Gadget to RCE in run() optionsnpm · tinypool · fixed in 2.1.2
- CVE-2026-104848Tinypool: Prototype Pollution gadget in worker options leads to Remote Code Executionnpm · tinypool · fixed in 2.1.1
- GHSA-C9XM-49CP-XCR9rmcp OAuth client fetches server-controlled resource_metadata URLscrates.io · rmcp · fixed in 2.0.0
- CVE-2026-104847ProseMirror: XSS vulnerability in prosemirror-view's paste handlingnpm · prosemirror-view · fixed in 1.42.3
- CVE-2026-104846Seroval: `fromJSON()` Promise thenable assimilation invokes plugin-produced callables (bypass of CVE-2026-59940)npm · seroval · fixed in 1.6.2
- CVE-2026-104845Seroval: Memory exhaustion via unchecked TypedArray length in JSON deserializationnpm · seroval · fixed in 1.6.3
- CVE-2026-104844PostCSS: Quadratic complexity in flat selector parsing allows CPU exhaustionnpm · postcss-selector-parser · fixed in 7.1.6, 6.1.5
- CVE-2026-104843uv: Path traversal on Windows through wheel extractionPyPI · uv · fixed in 0.12.18
- CVE-2026-94484Next.js: Cache poisoning in Next.js SSG/ISR rendering leads to cross-user content substitution and persistent denial of servicenpm · next · fixed in 16.3.8, 15.5.27
- CVE-2026-94485Next.js: Information disclosure in Next.js App Router metadata image routes via dynamicParams bypassnpm · next · fixed in 16.3.8