Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-77258MCP Atlassian: Arbitrary file read/exfiltration via upload_attachment missing validate_safe_path()PyPI · mcp-atlassian · fixed in 0.22.0
- CVE-2026-77274MCP Atlassian: SSRF Protection BypassPyPI · mcp-atlassian · fixed in 0.22.0
- CVE-2026-76805Nuclei: Environment Variable Disclosure via Response-Derived Data in DAST/Fuzz ModeGo · github.com/projectdiscovery/nuclei, github.com/projectdiscovery/nuclei/v2 +1 · fixed in 3.10.0
- CVE-2026-76802Nuclei: Arbitrary Command Execution via DAST Code Signature BypassGo · github.com/projectdiscovery/nuclei, github.com/projectdiscovery/nuclei/v2 +1 · fixed in 3.10.0
- CVE-2026-76804Nuclei: Local File Read via Workflow File-Protocol Gate BypassGo · github.com/projectdiscovery/nuclei, github.com/projectdiscovery/nuclei/v2 +1 · fixed in 3.10.0
- CVE-2026-76803Nuclei: Local File Read via MySQL Client Sandbox BypassGo · github.com/projectdiscovery/nuclei, github.com/projectdiscovery/nuclei/v2 +1 · fixed in 3.10.0
- CVE-2026-86062LightRAG: Stored Cross-Site Scripting (XSS) in the LightRAG WebUI chat/answer renderer via ingested contentPyPI · lightrag-hku · fixed in 1.5.5
- CVE-2026-85740LightRAG: SSRF via IPv6-transition address bypass (NAT64, IPv4-compatible, 6to4) of the native-markdown image-download guardPyPI · lightrag-hku · fixed in 1.5.5
- CVE-2026-85734LightRAG: No Rate Limiting on /login Endpoint Allows Brute-Force AttacksPyPI · lightrag-hku · fixed in 1.5.5
- CVE-2026-85725LightRAG: Plaintext Passwords Compared Without Constant-Time FunctionPyPI · lightrag-hku · fixed in 1.5.5
- CVE-2026-85709LightRAG: Sensitive Information Exposure Through Raw Exception Messages in API Error ResponsesPyPI · lightrag-hku · fixed in 1.5.5
- CVE-2026-566829Router: Login Brute-Force Lockout Bypass via Spoofable X-9r-Real-Ip Headernpm · 9router · fixed in 0.5.8
- CVE-2026-566819Router: Authentication Bypass in Public LLM API via Spoofable X-9r-Real-Ip Headernpm · 9router · fixed in 0.5.8
- CVE-2026-75510Novu: Stored XSS in In-App Inbox via notification redirect.url javascript: schemenpm · @novu/js · fixed in 3.18.0
- CVE-2026-88010Traefik: BasicAuth singleflight coalescing reintroduces an unauthenticated username-enumeration timing oracleGo · github.com/traefik/traefik, github.com/traefik/traefik/v3 +1 · fixed in 3.7.13
- CVE-2026-77637Cloudreve: Privilege Scope Bypass: State-Mutating Admin Operations Accessible via Read-Only OAuth ScopeGo · github.com/cloudreve/cloudreve, github.com/cloudreve/cloudreve/v3 +1 · fixed in 4.0.0-20260715070110-bce08f88e9d8
- CVE-2026-77633Cloudreve: Storage-quota TOCTOU race allows quota bypass and storage-based denial of serviceGo · github.com/cloudreve/cloudreve, github.com/cloudreve/cloudreve/v3 +1 · fixed in 4.0.0-20260715025621-7329602751c0
- CVE-2026-79913Cloudreve: SSRF guard bypass: checkIP does not decode IPv6-transition wrappers (NAT64, IPv4-compatible, 6to4) reaching internal and cloud-metadata addressesGo · github.com/cloudreve/cloudreve, github.com/cloudreve/cloudreve/v3 +1 · fixed in 4.0.0-20260715072853-1c5cad6dec7e
- CVE-2026-63374AnyIO: TLSStream IDNA 2003 host name encoding enables potential TLS certificate spoofingPyPI · anyio · fixed in 4.14.2
- CVE-2026-89407jackson-core: quadratic backtracking in NumberInput.PATTERN_FLOAT via looksLikeValidNumber() enables ReDoSMaven · com.fasterxml.jackson.core:jackson-core, tools.jackson.core:jackson-core · fixed in 2.18.11, 2.21.7, 2.22.3 and more
- CVE-2026-94626vLLM through 0.29.0 Memory Exhaustion via Unvalidated NIXL tp_sizePyPI · vllm · fixed in 0.30.0
- CVE-2026-94625vLLM through 0.29.0 Resource Exhaustion via Ownerless Mooncake Transfer PlaceholdersPyPI · vllm · fixed in 0.30.0
- CVE-2026-94624vLLM through 0.29.0 Denial of Service via Unbounded P2P KV Offloading SessionsPyPI · vllm · fixed in 0.32.0, 0.30.0
- CVE-2026-94623vLLM through 0.29.0 Denial of Service via NIXL Multi-Prompt Assertion FailurePyPI · vllm · fixed in 0.30.0
- CVE-2026-94622vLLM through 0.29.0 Denial of Service via Incomplete NIXL KV Transfer MetadataPyPI · vllm · fixed in 0.30.0
- CVE-2026-61541Zapros has an Unbounded Content-Encoding decompression chain that allows denial of servicePyPI · zapros · fixed in 0.14.0
- CVE-2026-61652Zapros: Streaming decoders ignored the requested chunk size, allowing a single compressed response chunk to allocate unbounded memory (decompression bomb)PyPI · zapros · fixed in 0.14.0
- CVE-2026-61647@roomi-fields/notebooklm-mcp has path traversal in vault.batch tool that allows arbitrary file write outside intended vault directorynpm · @roomi-fields/notebooklm-mcp · fixed in 2.0.3
- CVE-2026-58272Sync-in Server has Username/Login Enumeration via Timing Side-Channel on POST /api/auth/login (incomplete fix of the prior timing-attack advisory)npm · @sync-in/server · fixed in 2.4.1
- CVE-2026-58270Sync-in Server has a ReDoS via Unsanitized Regex in Sync Diff `pathFilters`npm · @sync-in/server · fixed in 2.4.0