Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-86049Jupyter Server: 5xx request logging leaks token-bearing Referer header valuesPyPI · jupyter-server · fixed in 2.21.0
- CVE-2026-68523Fulgur: Unbounded page slicing from attacker-controlled CSS height causes denial of servicecrates.io · fulgur · fixed in 0.19.0
- CVE-2026-68537Fulgur: Unbounded page slicing from attacker-controlled CSS height causes denial of servicecrates.io · fulgur · fixed in 0.26.0
- CVE-2026-45140Chamilo LMS CStudio upload flow allows unauthenticated remote code executionPackagist · chamilo/chamilo-lms · fixed in 2.0.1
- CVE-2026-50125MKP: Unbounded Pod Log Read via Attacker-Controlled `limitBytes`/`tailLines` Causes Memory ExhaustionGo · github.com/stackloklabs/mkp · fixed in 0.4.1
- CVE-2026-50285Pomerium: Pre-Auth Memory Exhaustion via Unbounded zstd Decompression in HPKE CallbackGo · github.com/pomerium/pomerium · fixed in 0.32.8
- CVE-2026-54495Cross-namespace FeatureFlagSource and InProcessConfiguration resolution exposes spec contents on multi-tenant clustersGo · github.com/open-feature/open-feature-operator
- CVE-2026-45720Omni: TOCTOU race condition allows multiple concurrent uses of a single-use SAML session tokenGo · github.com/siderolabs/omni · fixed in 1.6.6, 1.7.3
- CVE-2026-45723Omni: Operator can traverse image-factory API paths via unsanitized `talos_version` in CreateSchematicGo · github.com/siderolabs/omni · fixed in 1.6.6, 1.7.3
- CVE-2026-45726Omni: Reader-level users can retrieve imported cluster CA keys via ResourceServiceGo · github.com/siderolabs/omni · fixed in 1.6.6, 1.7.3
- CVE-2026-54504MCP Documentation Server: Web UI API binds to all interfaces without authentication by defaultnpm · @andrea9293/mcp-documentation-server · fixed in 1.13.1
- CVE-2026-54617GravitLauncher: Unauthenticated path traversal in LaunchServer FileServerHandlerMaven · pro.gravit.launcher:launchserver-api
- CVE-2026-49292Kiwi TCMS: The /init-db/ page renders and responds to requests after first usePyPI · kiwitcms
- CVE-2026-55061uniget: EDITOR Command Injection in uniget CLIGo · gitlab.com/uniget-org/cli · fixed in 0.27.6
- CVE-2026-55062uniget: Path Traversal in Hook Files - Directory Escape VulnerabilityGo · gitlab.com/uniget-org/cli · fixed in 0.27.6
- CVE-2026-47252Anyquery: AppleScript/JXA Code Injection via Unescaped URL in macOS plugins (Brave, Chrome, Edge, Reminders, Safari)Go · github.com/julien040/anyquery/plugins/brave, github.com/julien040/anyquery/plugins/chrome +2 · fixed in 0.0.0-20240826075852-c651df0b8767
- CVE-2026-54446NetLicensing MCP Server: Unauthenticated Use of Server-Side NetLicensing API Key in HTTP ModePyPI · netlicensing-mcp · fixed in 0.1.6
- CVE-2026-54546CloudTAK: Authenticated full-read SSRF in CloudTAK basemap import (PUT /api/basemap) — no IP-classification guardnpm · @tak-ps/cloudtak · fixed in 13.22.1
- CVE-2026-85716AsyncHttpClient: SCRAM and Digest mutual-authentication responses are not verifiedMaven · org.asynchttpclient:async-http-client · fixed in 3.0.12
- CVE-2026-85720AsyncHttpClient: Origin credentials sent to the proxy on the plaintext CONNECT requestMaven · org.asynchttpclient:async-http-client · fixed in 3.0.12, 2.16.1
- CVE-2026-85721AsyncHttpClient: Unbounded HTTP/1.1 response decompression enables a decompression-bomb denial of serviceMaven · org.asynchttpclient:async-http-client · fixed in 3.0.12, 2.16.1
- CVE-2026-85717AsyncHttpClient: Client-wide realm credentials re-sent to a cross-origin redirect targetMaven · org.asynchttpclient:async-http-client · fixed in 3.0.12, 2.16.1
- CVE-2026-61700MariaDB Connector/J does not enforce allowLocalInfile=false on server-initiated LOCAL INFILE requestsMaven · org.mariadb.jdbc:mariadb-java-client · fixed in 2.7.14, 3.3.5, 3.4.3 and more
- CVE-2026-69197Umbraco: Delivery API leaks protected (Public Access) content through Content Picker / Multi-Node Tree Picker expansionNuGet · umbraco.cms · fixed in 13.15.1, 17.5.3, 18.0.2
- CVE-2026-81515Steeltoe.Discovery.Eureka: malformed enum/bool/timestamp field aborts entire registry fetch (DoS)NuGet · steeltoe.discovery.eureka · fixed in 4.3.0
- CVE-2026-81516Steeltoe.Discovery.Consul: malformed 'secure' metadata aborts service instance lookup (DoS)NuGet · steeltoe.discovery.consul · fixed in 4.3.0
- CVE-2026-81868Steeltoe: Header-forwarded client cert lacks proof of private-key possessionNuGet · steeltoe.security.authorization.certificate · fixed in 4.3.0
- CVE-2026-75523Steeltoe.Management.Endpoint: HttpExchanges URI masking leaks query-string secretsNuGet · steeltoe.management.endpoint · fixed in 4.3.0
- CVE-2026-85715ExifReader: DoS via Crafted HEIC/AVIF iloc Box - Memory Exhaustionnpm · exifreader · fixed in 4.41.1
- CVE-2026-85999Soup Sieve: Polynomial-time ReDoS (O(n²)) in the whitespace/comment trimming regex `RE_WS_END` (triggers on VALID selectors)PyPI · soupsieve · fixed in 2.9.0