Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-77608Semantic MediaWiki has reflected XSS in `Special:SearchByProperty` (`property` and `value` parameters)Packagist · mediawiki/semantic-media-wiki · fixed in 7.2.0
- CVE-2026-77606Semantic MediaWiki has reflected XSS in Special:Ask plain table headersPackagist · mediawiki/semantic-media-wiki · fixed in 7.2.0
- CVE-2026-77301adm-zip: Uncontrolled memory allocation via the declared uncompressed size (DoS)npm · adm-zip · fixed in 0.6.1
- CVE-2026-77339Process Compose: Browser DNS rebinding lets websites control local process-compose MCP toolsGo · github.com/f1bonacc1/process-compose · fixed in 1.120.0
- CVE-2026-58197ToolHive: containerized MCP servers can reach host services via host.docker.internal, enabling lateral movementGo · github.com/stacklok/toolhive · fixed in 0.30.1
- CVE-2026-61795Capsule: hostnameRegexHandler.OnUpdate validates stale (old) Tenant regex, allowing invalid AllowedHostnames regex to bypass webhook validationGo · github.com/projectcapsule/capsule · fixed in 0.13.7
- CVE-2026-61672Capsule: Tenant owner bypasses Capsule's forbidden namespace/service/node label and annotation enforcementGo · github.com/projectcapsule/capsule · fixed in 0.13.7
- CVE-2026-61794Capsule: Malformed ForbiddenAnnotations.Regex can bypass Tenant validation and trigger namespace admission panicGo · github.com/projectcapsule/capsule · fixed in 0.13.7
- CVE-2026-81505Convoy: Cross-Tenant Source IDOR Leaks Plaintext Message Broker CredentialsGo · github.com/frain-dev/convoy · fixed in 0.9.3-0.20260724092134-1cc67cd16fb1
- CVE-2026-61682kcp front-proxy does not strip inbound X-Remote-* identity headers, allowing any authenticated client to inject groups/warrants and impersonate system:masters in any workspaceGo · github.com/kcp-dev/kcp · fixed in 0.31.4, 0.32.2
- CVE-2026-54147http4k: `DigestAuthProvider.verify` ignored configured algorithm and did not bind to request URIMaven · org.http4k:http4k-security-digest · fixed in 6.50.0.0, 5.42.0.0
- CVE-2026-54148http4k: `DigestAuthProvider.verify` did not bind to request URIMaven · org.http4k:http4k-security-digest · fixed in 6.50.0.0, 5.42.0.0, 4.51.0.0
- CVE-2025-61682Semantic MediaWiki vulnerable to stored XSS through wikitext via improper use of non-reserved data attributesPackagist · mediawiki/semantic-media-wiki · fixed in 7.0.0
- CVE-2025-53837org.xwiki.rendering:xwiki-rendering-xml has an Eval Injection issueMaven · org.xwiki.rendering:xwiki-rendering-xml · fixed in 14.10.2
- CVE-2026-93687braces through 3.0.3 Stack Overflow via Deeply Nested Patternsnpm · braces
- CVE-2026-93657hickory-resolver before 0.26.2 DNSSEC Validation Bypasscrates.io · hickory-resolver · fixed in 0.26.2
- CVE-2026-62282OpenCVE: Server-Side Request Forgery (SSRF) in notificationsPyPI · opencve · fixed in 3.0.0
- CVE-2026-93605vm2 NodeVM before 3.12.1 Remote Code Execution via child_processnpm · vm2 · fixed in 3.12.1
- CVE-2026-93602rustls-webpki before 0.103.10 CRL Revocation Check Bypasscrates.io · rustls-webpki · fixed in 0.103.10, 0.104.0-alpha.5
- CVE-2026-93601rustls webpki 0.101.0 before 0.103.12 Name Constraint Bypasscrates.io · rustls-webpki · fixed in 0.103.12, 0.104.0-alpha.6
- CVE-2026-93600rustls webpki Name Constraints URI Validation Bypasscrates.io · rustls-webpki · fixed in 0.103.12, 0.104.0-alpha.6
- CVE-2026-93599rustls-webpki before 0.103.13 Panic via empty BIT STRINGcrates.io · rustls-webpki · fixed in 0.103.13, 0.104.0-alpha.7
- CVE-2026-93592vLLM before 0.28.0 Denial of Service via negative token IDPyPI · vllm · fixed in 0.28.0
- CVE-2026-75157Apache Airflow: Asset queued-events DELETE endpoints gated on Dag READ instead of Dag EDIT (asset-triggered scheduling suppression)PyPI · apache-airflow, apache-airflow-core · fixed in 3.0.0, 3.3.2
- CVE-2026-93451snappy-java through 1.1.10.8 Buffer Overflow via typed uncompress methodsMaven · org.xerial.snappy:snappy-java · fixed in 1.1.10.9
- CVE-2026-93436vLLM through 0.29.0 Memory Exhaustion via Rejected RequestsPyPI · vllm · fixed in 0.30.0
- CVE-2026-50158yutu: Arbitrary File Write via MCP `caption-download` ToolGo · github.com/eat-pray-ai/yutu · fixed in 0.10.9-dev1
- CVE-2026-77281Caddy: rewrite placeholder re-expansionGo · github.com/caddyserver/caddy/v2 · fixed in 2.11.4
- CVE-2026-77615Paella Player: Stored XSS via caption cue textnpm · paella-core · fixed in 1.50.6
- GHSA-XJW9-38CR-6372djust: A template binding inherits a context safety grant it never earned (XSS)PyPI · djust · fixed in 1.1.2