Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-77405RabbitMQ amqp091-go: Missing Explicit TLS Minimum Version Configuration In URI ParserGo · github.com/rabbitmq/amqp091-go · fixed in 1.13.0
- CVE-2026-77404RabbitMQ amqp091-go: Connection Configuration Overwrite via Unsanitized TLS Path Parameter InjectionGo · github.com/rabbitmq/amqp091-go · fixed in 1.13.0
- CVE-2026-77410RabbitMQ amqp091-go: Resource Exhaustion (OOM) via Unbounded Body Buffer AllocationGo · github.com/rabbitmq/amqp091-go · fixed in 1.13.0
- CVE-2026-77406RabbitMQ amqp091-go: Consumer Message Flooding via Signed-to-Unsigned Integer Casting in Qos ConfigurationGo · github.com/rabbitmq/amqp091-go · fixed in 1.13.0
- CVE-2026-77403RabbitMQ amqp091-go: Denial of Service via Sub-Spec Frame Size NegotiationGo · github.com/rabbitmq/amqp091-go · fixed in 1.13.0
- CVE-2026-77407RabbitMQ amqp091-go: Plaintext Credential Exposure via Exported PLAIN Authentication Struct FieldsGo · github.com/rabbitmq/amqp091-go · fixed in 1.13.0
- CVE-2026-77408RabbitMQ amqp091-go: Silent Data Truncation and State Corruption via Shortstr Integer OverflowGo · github.com/rabbitmq/amqp091-go · fixed in 1.13.0
- CVE-2026-77401Zope AccessControl: Information disclosure through Python string `format` and `format_map` functionsPyPI · accesscontrol · fixed in 7.4
- CVE-2026-63671@nuxtjs/mdc: the URL sanitizer misses SVG xlink:href and data:text/html, allowing XSS from untrusted markdown at the default configurationnpm · @nuxtjs/mdc · fixed in 0.22.1
- CVE-2026-88976@platejs/core HTML deserialization can trigger browser behavior during parsingnpm · @platejs/core · fixed in 53.3.11
- CVE-2026-76825RestrictedPython: Sandbox escape via string.Formatter field resolutionPyPI · restrictedpython · fixed in 8.4
- CVE-2026-84997react/http: A malformed HTTP chunked body can lead to a denial-of-service and peg the CPUPackagist · react/http · fixed in 1.11.1
- CVE-2026-61709OpenFGA: ListUsers returns a deliberately-excluded user (authorization-decision over-inclusion) when a `but not` exclusion under a type-bound wildcard is intersected (`and`) with another relation that also grants that userGo · github.com/openfga/openfga · fixed in 1.18.1
- CVE-2026-61598Client mass-assignment of arbitrary view attributes via the default dj-model update_model handlerPyPI · djust · fixed in 1.0.7
- CVE-2026-61590djust's observability endpoints are network-exposed: the localhost gate is an opt-in middleware the docs omit, and the views enforce only DEBUGPyPI · djust · fixed in 1.0.7
- CVE-2026-8462OpenMeter SQL Injection in ClickHouse-backed Meter DefinitionsGo · github.com/openmeterio/openmeter · fixed in 1.0.0-beta.228
- CVE-2026-86792Apache Airflow Apache Kafka provider: Connection-editor remote code execution on the Scheduler via Kafka connection callback configurationPyPI · apache-airflow-providers-apache-kafka · fixed in 2.0.0
- CVE-2026-92081fastify vulnerable to Denial of Service via unhandled exception on HTTP/2 trailer responsesnpm · fastify · fixed in 5.12.5
- CVE-2026-61560@zereight/mcp-gitlab's unauthenticated arbitrary file read via `upload_markdown` enables PAT exfiltration and full account takeovernpm · @zereight/mcp-gitlab · fixed in 2.1.27
- CVE-2026-61559@zereight/mcp-gitlab Vulnerable to Server-Side Request Forgerynpm · @zereight/mcp-gitlab · fixed in 2.1.27
- CVE-2026-92000adm-zip 0.5.14 through 0.6.0 Denial of Service via Zero Declared Uncompressed Sizenpm · adm-zip · fixed in 0.6.1
- CVE-2026-61568@zereight/mcp-gitlab: DNS rebinding reaches local Streamable HTTP MCP transportnpm · @zereight/mcp-gitlab · fixed in 2.1.30
- CVE-2026-61554emp3r0r has an unauthenticated HTTP Polling DoSGo · github.com/jm33-m0/emp3r0r/core · fixed in 0.0.0-20260531142011-aed3d81641ab
- CVE-2026-32599Netmaker has a boolean‑based SQL InjectionGo · github.com/gravitl/netmaker · fixed in 1.5.0
- CVE-2026-61544libp2p-quic: Remote panic via certificate expiry race during QUIC handshakecrates.io · libp2p-quic · fixed in 0.13.1
- CVE-2026-88975Http4s: Ember HTTP/2 buffers a frame's declared payload before checking SETTINGS_MAX_FRAME_SIZEMaven · org.http4s:http4s-ember-core_2.12, org.http4s:http4s-ember-core_2.13 +1 · fixed in 0.23.37, 1.0.0-M48
- CVE-2026-69206Http4s: DigestAuth allows replay of captured requestsMaven · org.http4s:http4s-ember-core_2.12, org.http4s:http4s-ember-core_2.13 +1 · fixed in 0.23.35, 1.0.0-M47
- CVE-2026-69202Http4s Ember HTTP/2: unbounded inbound body bufferingMaven · org.http4s:http4s-ember-core_2.12, org.http4s:http4s-ember-core_2.13 +1 · fixed in 0.23.35, 1.0.0-M47
- CVE-2026-69218Http4s Ember HTTP/2: unbounded continuation frame accumulationMaven · org.http4s:http4s-ember-core_2.12, org.http4s:http4s-ember-core_2.13 +1 · fixed in 0.23.35, 1.0.0-M47
- CVE-2026-69203Http4s Ember HTTP/2: does not enforce SETTINGS_MAX_CONCURRENT_STREAMSMaven · org.http4s:http4s-ember-core_2.12, org.http4s:http4s-ember-core_2.13 +1 · fixed in 0.23.35, 1.0.0-M47