Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-102996pypdf: Possible large memory usage when parsing font dataPyPI · pypdf · fixed in 6.18.1
- CVE-2026-102995pypdf: Possible large memory usage for large /ToUnicode streams (Follow-up 2)PyPI · pypdf · fixed in 6.18.1
- CVE-2026-102994pypdf: Possible long runtimes/large memory usage when parsing indirect objectsPyPI · pypdf · fixed in 6.18.0
- CVE-2026-102993pypdf: Possible large memory usage when retrieving Roman page labelsPyPI · pypdf · fixed in 6.17.0
- CVE-2026-102992piscina: Prototype-pollution gadget in ThreadPool.options allows RCE via execArgv / loadBalancer / envnpm · piscina · fixed in 5.3.2, 4.9.4, 6.0.0-rc.5
- CVE-2026-102991Mako: Path traversal via drive-letter URI on Windows in TemplateLookupPyPI · mako · fixed in 1.4.2
- CVE-2026-102990basic-ftp: Quadratic-time CPU denial of service in Client.list() Unix directory-listing parser (RE_LINE backtracking)npm · basic-ftp · fixed in 6.2.1
- CVE-2026-55224MineAdmin: Path Traversal via Unsanitized identifier in Plugin Install/UninstallPackagist · mineadmin/mineadmin · fixed in 3.2.0-alpha.2
- CVE-2026-55107Kobako Vulnerable to Sandbox Escape: guest eval reaches host RCE via method_missing → public_send (any bound Service)RubyGems · kobako · fixed in 0.9.1
- CVE-2026-103241vllm-project vLLM Gemma4UnifiedParser gemma4.rs denial of servicePyPI · vllm · fixed in 0.27.0
- CVE-2026-55177CloudTAK: Authenticated full-read SSRF in /api/esri* routes — user-controlled URL fetched with no IP-classification guardnpm · @tak-ps/cloudtak · fixed in 13.10.0
- CVE-2026-94545Satori-generated SVG has improper escapingnpm · satori · fixed in 0.33.5
- CVE-2026-102984Astro: Malformed port in the Host header can crash the Node adapternpm · @astrojs/node · fixed in 11.1.3
- CVE-2026-102983Astro: Netlify Image CDN allowlist bypass enables SSRFnpm · @astrojs/netlify · fixed in 8.2.4
- CVE-2026-92899Apache WSS4J: UsernameToken replay protection bypassed by re-encoding the NonceMaven · org.apache.wss4j:wss4j-ws-security-dom · fixed in 4.0.2, 3.0.6, 2.4.4
- CVE-2026-102938virtualenv writes prompt values into pyvenv.cfg without sanitizing line boundaries, allowing configuration injectionPyPI · virtualenv · fixed in 21.7.11
- CVE-2026-102937virtualenv: Command injection via --prompt in activate.bat (batch activator)PyPI · virtualenv · fixed in 21.7.12
- CVE-2026-102930virtualenv: Downloaded seed wheels (pip/setuptools) are not integrity-checked before usePyPI · virtualenv · fixed in 21.7.12
- CVE-2026-102925virtualenv bash and fish activation scripts execute commands embedded in pathsPyPI · virtualenv · fixed in 21.7.13
- CVE-2026-102904JupyterLab: Argument injection in JupyterLab extension uninstall exposes server-readable files and internal URLsPyPI · jupyterlab · fixed in 4.6.4, 4.5.11
- CVE-2026-102831JupyterLab: Cross-site scripting (XSS) in JupyterLab via notebook cells pasted from the system clipboardPyPI · jupyterlab, jupyterlite +2 · fixed in 4.6.4, 4.5.11, 0.8.4 and more
- CVE-2026-102830JupyterLab: Cross-site scripting (XSS) in JupyterLab via crafted language package (jupyterlab.json)PyPI · jupyterlab, jupyterlite-core · fixed in 4.6.4, 4.5.11, 0.8.4
- CVE-2026-102829simple-git: `VISUAL` editor environment variable is omitted from unsafe editor detectionnpm · @simple-git/argv-parser · fixed in 2.0.1
- CVE-2026-102828simple-git unsafe-operation guard does not block trailer command configurationnpm · simple-git · fixed in 4.0.1
- CVE-2026-102827simple-git: unsafe-operations plugin bypass via git long-option abbreviation (--receive-p/--exe) -> command execution (residual of CVE-2026-28291)npm · simple-git · fixed in 4.0.0
- CVE-2026-102826simple-git allows command execution through unblocked Git configuration includesnpm · simple-git · fixed in 4.0.0
- CVE-2026-102825Russh: Configured server auth-attempt cap is not enforced in the USERAUTH_REQUEST runtime pathcrates.io · russh · fixed in 0.62.6
- CVE-2026-102824Russh: Missing X25519 zero-point validation in hybrid ML-KEM key exchangecrates.io · russh · fixed in 0.63.0
- CVE-2026-102823russh: Client-side channel-scoped Handler callbacks fire for channel IDs the client never openedcrates.io · russh · fixed in 0.63.1
- CVE-2026-102822russh: negotiating a MAC-requiring block cipher (CTR/CBC) with mac=none causes a slice-index-out-of-range paniccrates.io · russh · fixed in 0.63.1