Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-92944vm2 3.10.2 through 3.11.6 Sandbox Escape via Promise Protectornpm · vm2 · fixed in 3.11.7
- CVE-2026-92942vm2 before 3.11.7 Timeout Bypass via FinalizationRegistrynpm · vm2 · fixed in 3.11.7
- CVE-2026-92941vm2 3.11.3 before 3.11.7 TLS Trust Store Manipulationnpm · vm2 · fixed in 3.11.7
- CVE-2026-92940vm2 3.11.3 through 3.11.6 HTTPS Credential Exposure via globalAgentnpm · vm2 · fixed in 3.11.7
- CVE-2026-92939vm2 3.11.3 through 3.11.6 Native Code Execution via crypto.setEnginenpm · vm2 · fixed in 3.11.7
- CVE-2026-92938vm2 3.11.3 through 3.11.6 Remote Code Execution via node:sqlitenpm · vm2 · fixed in 3.11.7
- CVE-2026-92937vm2 3.11.6 Remote Code Execution via Promise call/applynpm · vm2 · fixed in 3.11.7
- CVE-2026-92936vm2 3.11.0 before 3.11.7 Information Disclosure via Error Stacknpm · vm2 · fixed in 3.11.7
- CVE-2026-92935vm2 NodeVM Remote Code Execution via Array-Shaped Requirenpm · vm2 · fixed in 3.11.7
- CVE-2026-92934vm2 before 3.11.8 Sandbox Escape RCE via AggregateErrornpm · vm2 · fixed in 3.11.8
- CVE-2026-92933vm2 before 3.11.8 Information Disclosure via util.getCallSitesnpm · vm2 · fixed in 3.11.8
- CVE-2026-82723Actor record with password digest stored in AshAuthentication audit log entriesHex · ash_authentication · fixed in 4.15.0, 5.0.0-rc.2
- CVE-2026-61599djust has an unauthenticated arbitrary module import via the WebSocket/SSE view-mount pathPyPI · djust · fixed in 1.0.7
- CVE-2026-61589djust: WebSocket/runtime reconstructed request omits the client Host, causing host/subdomain TenantResolvers to misresolve the tenant on the live pathPyPI · djust · fixed in 1.0.7
- CVE-2026-61596djust has broken object-level access control (IDOR)PyPI · djust · fixed in 1.0.7
- CVE-2026-61588djust's Django model serialization has no sensitive-field denylist: password hashes, privilege flags, and PII on a public view attribute are sent to the clientPyPI · djust · fixed in 1.0.7
- CVE-2026-61594djust has an authorization bypass on the WebSocket/SSE mount pathPyPI · djust · fixed in 1.0.7
- CVE-2026-61591djust: Unsigned client state snapshot is restored as trusted view state (privilege escalation / state injection)PyPI · djust · fixed in 1.0.7
- CVE-2026-61592djust: SSE sessions are not bound to the authenticated user; the client-chosen session_id is the sole authorization capability (session hijack)PyPI · djust · fixed in 1.0.7
- CVE-2026-61597djust is vulnerable to stored/reflected XSS via javascript: URLs in built-in component template tagsPyPI · djust · fixed in 1.0.7
- CVE-2026-92599Joi before 17.13.7 and 18.2.6 ReDoS via isoDatenpm · joi · fixed in 17.13.7, 18.2.6
- CVE-2026-92598Nodemailer before 9.1.0 IDN/Punycode Domain Allow-list Bypassnpm · nodemailer · fixed in 9.1.0
- CVE-2026-92597Nodemailer before 9.1.0 Email Domain Validation Bypass via RFC 5322 Commentnpm · nodemailer · fixed in 9.1.0
- CVE-2026-92596Nodemailer before 9.1.0 Denial of Service via addressparsernpm · nodemailer · fixed in 9.1.0
- CVE-2026-92595Nodemailer before 9.1.1 Security Sandbox Bypass via resolveContentnpm · nodemailer · fixed in 9.1.1
- CVE-2026-64684RMCP: Custom HTTP headers leak to cross-origin redirect targetscrates.io · rmcp · fixed in 2.1.0
- CVE-2026-75513Marten: SQL injection in Marten's LINQ provider via unescaped string literalsNuGet · marten · fixed in 9.13.0
- CVE-2026-81871OpenTelemetry-Go: Log gRPC exporter ignores env TLS certs, bypassing mTLS/pinningGo · go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc · fixed in 0.21.0
- CVE-2026-81872OpenTelemetry-Go: BatchProcessor can busy-spin when export buffer is fullGo · go.opentelemetry.io/otel/sdk/log · fixed in 0.21.0
- CVE-2026-81869OpenTelemetry-Go: UTF-8 replacement rune bypasses attribute length truncationGo · go.opentelemetry.io/otel/sdk · fixed in 1.33.0