Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-104853Nx: Path traversal in nx migrate package-migrations extractionnpm · nx · fixed in 22.7.10, 23.2.1
- CVE-2026-104851fsspec: Server-Side Template Injection in ReferenceFileSystem leads to Remote Code ExecutionPyPI · fsspec · fixed in 2026.6.0
- CVE-2026-104849Tinypool: Prototype Pollution Gadget to RCE in run() optionsnpm · tinypool · fixed in 2.1.2
- CVE-2026-104848Tinypool: Prototype Pollution gadget in worker options leads to Remote Code Executionnpm · tinypool · fixed in 2.1.1
- GHSA-C9XM-49CP-XCR9rmcp OAuth client fetches server-controlled resource_metadata URLscrates.io · rmcp · fixed in 2.0.0
- CVE-2026-104847ProseMirror: XSS vulnerability in prosemirror-view's paste handlingnpm · prosemirror-view · fixed in 1.42.3
- CVE-2026-104846Seroval: `fromJSON()` Promise thenable assimilation invokes plugin-produced callables (bypass of CVE-2026-59940)npm · seroval · fixed in 1.6.2
- CVE-2026-104845Seroval: Memory exhaustion via unchecked TypedArray length in JSON deserializationnpm · seroval · fixed in 1.6.3
- CVE-2026-104844PostCSS: Quadratic complexity in flat selector parsing allows CPU exhaustionnpm · postcss-selector-parser · fixed in 7.1.6, 6.1.5
- CVE-2026-104843uv: Path traversal on Windows through wheel extractionPyPI · uv · fixed in 0.12.18
- CVE-2026-94484Next.js: Cache poisoning in Next.js SSG/ISR rendering leads to cross-user content substitution and persistent denial of servicenpm · next · fixed in 16.3.8, 15.5.27
- CVE-2026-94485Next.js: Information disclosure in Next.js App Router metadata image routes via dynamicParams bypassnpm · next · fixed in 16.3.8
- CVE-2026-94483Next.js: Server-Side Request Forgery in Image Optimizationnpm · next · fixed in 16.3.8
- CVE-2026-94543Next.js: Cache poisoning of SSG and ISR pages in self-hosted Next.js applicationsnpm · next · fixed in 15.5.27, 16.3.8
- CVE-2026-94544Next.js: Pending `use cache` fill can leak Draft Mode content into regular responses and persisted pagesnpm · next · fixed in 16.3.8
- CVE-2026-94486Next.js: Information disclosure in the Next.js development server's Model Context Protocol endpointnpm · next · fixed in 16.3.8
- CVE-2026-104473YesWiki before 4.5.3 Multiple Reflected XSS via BazaR and listpagesPackagist · yeswiki/yeswiki · fixed in 4.6.0
- CVE-2026-104437Zebra before 4.4.0 Consensus Split via SIGHASH_SINGLE Missing-Output Handlingcrates.io · zebrad · fixed in 4.4.0
- CVE-2026-104436Zebra before 4.5.0 CPU Amplification via Uncapped getblocks/getheaders Locator Lengthcrates.io · zebra-chain, zebrad · fixed in 8.0.0, 4.5.0
- CVE-2026-104435Zebra 4.4.0 Consensus Divergence via V5 SIGHASH_SINGLE Without Outputcrates.io · zebra-script, zebrad · fixed in 6.0.1, 4.4.1
- CVE-2026-104434Zebra before 8.0.0 Denial of Service via z_listunifiedreceivers RPCcrates.io · zebra-rpc, zebrad · fixed in 8.0.0, 4.5.0
- CVE-2026-104418Ghost from 6.10.3 before 6.64.0 RCE via Theme Translation Filesnpm · ghost · fixed in 6.64.0
- CVE-2026-104417Ghost 1.20.0 before 6.64.0 Path Traversal via Locale Settingnpm · ghost · fixed in 6.64.0
- CVE-2026-104416Ghost 4.39.0 before 6.64.0 Invite Token Disclosure via Admin APInpm · ghost · fixed in 6.64.0
- CVE-2026-104415Ghost 0.7.2 before 6.64.0 Password Hash Ordering Disclosure via Admin APInpm · ghost · fixed in 6.64.0
- CVE-2026-104414Ghost from 2.5.0 before 6.64.0 Stored XSS via oEmbed Photo Responsesnpm · ghost · fixed in 6.64.0
- CVE-2026-104413Ghost 5.94.0 before 6.64.0 Stored XSS via Bookmark Card Imagesnpm · ghost · fixed in 6.64.0
- CVE-2026-104412Ghost 0.5.0 before 6.64.0 Privilege Escalation via Staff Role Assignmentnpm · ghost · fixed in 6.64.0
- CVE-2026-104411Ghost 6.22.1 before 6.64.0 Stored XSS via Local Storage File Uploadsnpm · ghost · fixed in 6.64.0
- CVE-2026-96780figlet is vulnerable to denial of service via unbounded loop when whitespaceBreak is used with a small widthnpm · figlet · fixed in 1.11.3