Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-63506Tina: [Broken Access Control] letting any TinaCloud user authorize against any self-hosted sitenpm · @tinacms/auth, next-tinacms-azure · fixed in 1.1.4, 15.0.1
- CVE-2026-81870OpenTelemetry-Go: Exporter config logging may leak endpoint URLs in info logsGo · go.opentelemetry.io/otel/exporters/otlp/otlptrace, go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc +3 · fixed in 1.45.0
- CVE-2026-62949AsyncSSH: asyncio event-loop freeze via SSH maximum packet size = 0 in SSH_MSG_CHANNEL_OPEN / OPEN_CONFIRMATIONPyPI · asyncssh · fixed in 2.24.0
- CVE-2026-63225Redocly CLI: Path traversal when using `split` commandnpm · @redocly/cli · fixed in 1.34.17, 2.33.2
- CVE-2026-86071Junrar: LocalFolderExtractor mkdir escape allows directory creation outside extraction rootMaven · com.github.junrar:junrar · fixed in 7.6.1
- CVE-2026-86043Skipper: OPA body-authz bypass: truncated_body mitigation fails open on chunked/HTTP-2 (incomplete fix CVE-2026-50197)Go · github.com/zalando/skipper · fixed in 0.27.37
- CVE-2026-81876HAPI FHIR: SHCParser DEFLATE infinite loop causes denial of serviceMaven · ca.uhn.hapi.fhir:org.hl7.fhir.r5, ca.uhn.hapi.fhir:org.hl7.fhir.validation +1 · fixed in 6.9.12
- CVE-2026-81875HAPI FHIR: SHCParser unbounded DEFLATE decompression causes denial of serviceMaven · ca.uhn.hapi.fhir:org.hl7.fhir.r5, ca.uhn.hapi.fhir:org.hl7.fhir.validation +1 · fixed in 6.9.12
- CVE-2026-77360oRPC: Vary Header Injection in CORS Plugin leading to potential Cache/CORS Bypassnpm · @orpc/server · fixed in 1.14.8
- CVE-2026-86003CoreDNS DoH/DoQ/gRPC bypass UPDATE rejection enforced on UDP/TCPGo · github.com/coredns/coredns · fixed in 1.14.7
- CVE-2026-82399CoreDNS: Unauthenticated memory exhaustion in custom transportsGo · github.com/coredns/coredns · fixed in 1.14.7
- CVE-2026-59823LiteLLM: Server-side request forgery via the `user_config` request parameter in LiteLLM ProxyPyPI · litellm · fixed in 1.83.9
- CVE-2026-81176Svelte devalue: DoS via malformed inputnpm · devalue · fixed in 5.9.2
- CVE-2026-75516RabbitMQ Java client: Frame-level OOM: Math.min(maxInboundMessageBodySize, 0) defeats frame size enforcementMaven · com.rabbitmq:amqp-client · fixed in 5.34.0
- CVE-2026-63126Wire: Unauthenticated decoder crash via 32-bit length integer overflow in ByteArrayProtoReader32 (incomplete fix of CVE-2026-45799)Maven · com.squareup.wire:wire-runtime · fixed in 6.4.5, 7.0.0-alpha04
- CVE-2026-69147vLLM: Request-selected PyNvVideoCodec GPU decode bypasses static VRAM reservationPyPI · vllm · fixed in 0.28.0
- CVE-2026-57173vLLM: Unauthenticated audio decompression-bomb DoS in /v1/chat/completionsPyPI · vllm · fixed in 0.24.0
- CVE-2026-85756SSH.NET: ScpClient allows server-side RCE via default SCP path handlingNuGet · ssh.net · fixed in 2026.0.0
- CVE-2026-85731oras-go: Arbitrary file write outside file.Store root via symlink-chain bypass in tar extraction (pushDir)Go · oras.land/oras-go/v2 · fixed in 2.6.2
- CVE-2026-85732oras-go: Blind SSRF via unvalidated Link header URL in pagination allows internal network probingGo · oras.land/oras-go/v2 · fixed in 2.6.2
- CVE-2026-68904node-opcua: TCP Socket Leak (FIN-WAIT-2) via keepalive reconnection cycle - Resource Exhaustionnpm · node-opcua, node-opcua-client +1 · fixed in 2.170.0
- CVE-2026-59944Composer: CVE-2026-59946 fix bypass via symlinked package bin pathPackagist · composer/composer · fixed in 2.10.3, 2.2.30
- CVE-2026-61593djust has Cross-Site Request Forgery on the Server-Sent-Events transport: a cross-origin page can drive a victim-authenticated SSE sessionPyPI · djust · fixed in 1.0.7
- CVE-2025-59953LMdeploy has Remote Code Execution by Pickle Deserialization via zmq_rpc.call_and_response() in InterLM/lmdeployPyPI · lmdeploy · fixed in 0.10.2
- CVE-2026-61595djust: Multi-tenant isolation fails open on the WebSocket/SSE path, disclosing other tenants' dataPyPI · djust · fixed in 1.0.7
- CVE-2026-82410Pocketbase: Unhandled panic in worker goroutinesGo · github.com/pocketbase/pocketbase · fixed in 0.22.48, 0.39.7
- CVE-2026-63127RMCP: Missing Resource Field Validation in OAuth Protected Resource Metadata Discoverycrates.io · rmcp · fixed in 2.0.0
- CVE-2026-63128RMCP: Unauthenticated permanent session-table leak in rmcp Streamable HTTP server transport leads to remote denial-of-servicecrates.io · rmcp · fixed in 2.0.0
- CVE-2026-77411RabbitMQ amqp091-go: Protocol Desynchronization and Frame Injection via Integer Overflow in readLongstrGo · github.com/rabbitmq/amqp091-go · fixed in 1.13.0
- CVE-2026-77412RabbitMQ amqp091-go: Denial of Service via Malicious Field Length in AMQP ClientGo · github.com/rabbitmq/amqp091-go · fixed in 1.13.0