Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-104183stream-json: Prototype pollution: Assembler writes this.current[this.key] on plain objectsnpm · stream-json · fixed in 3.6.0
- CVE-2026-104182stream-json: JSONC parser and verifier re-scan the whole accumulated comment on every input chunknpm · stream-json · fixed in 3.6.0
- CVE-2026-104181Filament: Multi-factor authentication (app) management actions do not require password reauthenticationPackagist · filament/filament · fixed in 4.13.3, 5.8.3
- CVE-2026-53964Document Merge Service vulnerable to RCE via SSTI (xlsx tempaltes)PyPI · document-merge-service · fixed in 9.1.0
- CVE-2026-55252OpenRun: Redirect URL validation bypass using //host paths leads to Open RedirectGo · github.com/openrundev/openrun · fixed in 0.17.7
- CVE-2026-54049Sakai Conversations has a Stored XSS IssueMaven · org.sakaiproject.conversations:sakai-conversations-impl, org.sakaiproject.kernel:sakai-kernel-impl +1
- CVE-2026-103923KaTeX: Existing prototype pollution can bypass trust restrictionsnpm · katex · fixed in 0.18.2
- CVE-2026-103922Capacitor Android and iOS: remote content can be loaded at the app origin via the internal HTTP proxy pathnpm · @capacitor/android, @capacitor/ios · fixed in 6.2.2, 7.6.9, 8.5.1 and more
- CVE-2026-77387geopy: Regular Expression Denial of Service (ReDoS) in geopy.PointPyPI · geopy · fixed in 2.5.0
- CVE-2026-103921GraphQL Tools: TLS Certificate Validation Disabled in Legacy GraphQL WebSocket Executornpm · @graphql-tools/executor-legacy-ws · fixed in 1.1.35
- GHSA-9CQF-HHRQ-7V45SiYuan: getAttributeViewSearchTarget returns database row content to anonymous readers with no publish-access check, reopening the class…Go · github.com/siyuan-note/siyuan/kernel · fixed in 0.0.0-20260812083335-251596fc0de2
- GHSA-MCM9-63F2-9J32devalue: Repeated primitive strings cause quadratic expansion in unevalnpm · devalue · fixed in 5.9.3
- GHSA-WF3X-273G-MVXVdevalue: Sparse arrays emitted by uneval cause eager allocation when evaluatednpm · devalue · fixed in 5.9.3
- GHSA-R9W8-H9R3-54W4devalue: Custom ArrayBuffer revivers can bypass typed-array allocation validationnpm · devalue · fixed in 5.9.3
- GHSA-4Q55-J62X-FR9Hdevalue: Malformed null-prototype object keys bypass proto rejection via property-key coercionnpm · devalue · fixed in 5.9.3
- CVE-2026-103004next.js cache leak on warm `use cache` handlers accessing root paramnpm · next · fixed in 16.3.8
- RUSTSEC-2026-0441`pin-utils` is unmaintainedcrates.io · pin-utils
- CVE-2026-103290Ghost 6.14.0 before 6.27.0 Path Traversal via ImageSizenpm · ghost · fixed in 6.27.0
- CVE-2026-103289Ghost 5.9.0 before 6.44.1 Authorization Bypass via Commentsnpm · ghost · fixed in 6.44.1
- CVE-2026-103288Ghost 5.9.0 before 6.44.1 Authorization Bypass via Comment Likenpm · ghost · fixed in 6.44.1
- CVE-2026-103287Ghost 1.18.0 before 6.27.0 Server-Side Request Forgery via Webhooknpm · ghost · fixed in 6.27.0
- CVE-2026-103263Tornado before 6.5.9 StaticFileHandler Path Traversal via SymlinkPyPI · tornado · fixed in 6.5.9
- CVE-2026-103262Tornado before 6.5.9 Denial of Service via CurlAsyncHTTPClientPyPI · tornado · fixed in 6.5.9
- CVE-2026-103261Tornado before 6.5.9 Denial of Service via Query StringPyPI · tornado · fixed in 6.5.9
- CVE-2026-51886langflow-ai langflow v1.9.3 is affected by: Code Injection.PyPI · langflow · fixed in 1.10.1
- CVE-2026-103001PyJWT.decode() reintroduces options-dict mutation, enabling silent claim-verification bypass on dict reusePyPI · pyjwt
- CVE-2026-103000pypdf: Possible large memory usage when retrieving alphabetical page labelsPyPI · pypdf · fixed in 6.19.0
- CVE-2026-102999pypdf: Possible long runtimes with large amount of embedded filesPyPI · pypdf · fixed in 6.19.0
- CVE-2026-102998pypdf: Possible long runtimes when generating appearance streamsPyPI · pypdf · fixed in 6.19.0
- CVE-2026-102997pypdf: Possible long runtimes for partially malformed FlateDecode streams (Follow-up)PyPI · pypdf · fixed in 6.18.1