Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-69215Http4s: CookieJar middleware matches by substring, leaking cookies cross-originMaven · org.http4s:http4s-client_2.12, org.http4s:http4s-client_2.13 +1 · fixed in 0.23.35, 1.0.0-M47
- CVE-2026-69205Http4s: Ember Transfer-Encoding value parsing (TE.CL / TE.0 request smuggling)Maven · org.http4s:http4s-ember-core_2.12, org.http4s:http4s-ember-core_2.13 +1 · fixed in 0.23.35, 1.0.0-M47
- CVE-2026-69213Http4s Ember HTTP/2: unbounded outbound frame queueMaven · org.http4s:http4s-ember-core_2.12, org.http4s:http4s-ember-core_2.13 +1 · fixed in 0.23.35, 1.0.0-M47
- CVE-2026-69214Http4s: CookieJar middleware accepts arbitrary Set-Cookie domainMaven · org.http4s:http4s-client_2.12, org.http4s:http4s-client_2.13 +1 · fixed in 0.23.35, 1.0.0-M47
- CVE-2026-69201Http4s: ResourceService and Webjar Service path escape via percent-encoded separatorsMaven · org.http4s:http4s-server_2.12, org.http4s:http4s-server_2.13 +1 · fixed in 0.23.35, 1.0.0-M47
- CVE-2026-69216Http4s: Ember chunk parser lenience (TE.TE request smuggling)Maven · org.http4s:http4s-ember-core_2.12, org.http4s:http4s-ember-core_2.13 +1 · fixed in 0.23.35, 1.0.0-M47
- CVE-2026-69208Http4s: DigestAuth nonce map grows unboundedMaven · org.http4s:http4s-ember-server_2.12, org.http4s:http4s-ember-server_2.13 +1 · fixed in 0.23.35, 1.0.0-M47
- CVE-2026-69204Http4s: Ember accepts Transfer-Encoding combined with Content-Length (CL.TE request smuggling)Maven · org.http4s:http4s-ember-core_2.12, org.http4s:http4s-ember-core_2.13 +1 · fixed in 0.23.35, 1.0.0-M47
- CVE-2026-57442MCPVault: PathFilter restricted directories (.git/.obsidian/node_modules) only denied at vault root, not nestednpm · @bitbonsai/mcpvault · fixed in 0.11.5
- CVE-2026-57441MCPVault: PathFilter restricted-directory deny-list bypass via case and trailing dot/space equivalencenpm · @bitbonsai/mcpvault · fixed in 0.11.4
- CVE-2026-58483mcp-searxng: Unbounded Response Body Read Bypasses URL Size Limit in `web_url_read`npm · mcp-searxng · fixed in 1.7.1
- CVE-2026-58485mcp-searxng: DNS-resolved Private Hostname SSRF in `web_url_read`npm · mcp-searxng · fixed in 1.7.1
- CVE-2026-54688mcp-searxng: SSRF in web_url_read: the internal-address guard is disabled by default (MCP_HTTP_HARDEN off)npm · mcp-searxng · fixed in 1.2.1
- CVE-2026-54689mcp-searxng hardened-mode SSRF bypasses permit internal URL accessnpm · mcp-searxng · fixed in 1.2.1
- CVE-2026-56830Shopper: Incomplete fix for GHSA-h4mp-g9c6-xwph: Media sub-form store() still lacks authorizationPackagist · shopper/framework · fixed in 2.9.2
- CVE-2026-56831Shopper: Negative discount values accepted and propagated through order calculation pipelinePackagist · shopper/framework · fixed in 2.9.0
- CVE-2026-56827Shopper: Authorization bypass in Filament bulk actions allows browse-only staff to mass-delete attributes/tags and mass-toggle visibility of brands/categories/suppliersPackagist · shopper/framework · fixed in 2.9.2
- CVE-2026-56829Shopper: Unauthorized inventory stock manipulation via unlocked variant property in VariantStock componentPackagist · shopper/framework · fixed in 2.9.2
- CVE-2026-56825Shopper: Missing authorization on product removal actions in CollectionProducts componentPackagist · shopper/framework · fixed in 2.9.2
- CVE-2026-55374canto-saas-api: Authenticated API requests can be redirected via unencoded path variablesPackagist · jleehr/canto-saas-api · fixed in 3.0.0
- CVE-2026-55375canto-saas-api: OAuth credentials exposed in URL query string and exception messagesPackagist · jleehr/canto-saas-api · fixed in 3.0.0
- CVE-2026-61668DIRAC: Pilot code downloaded over unverified HTTPS connectionPyPI · dirac · fixed in 8.0.79, 9.0.22, 9.1.10
- CVE-2026-61667DIRAC: RCE in FileCatalog DatasetManager via SQL injection + evalPyPI · dirac · fixed in 8.0.79, 9.0.22, 9.1.10
- CVE-2026-45579DIRAC: RCE in RequestManager due to eval on untrusted inputPyPI · dirac · fixed in 8.0.79, 9.0.22, 9.1.10
- CVE-2026-53954Bugsink: DOS using large numbers of event tagsPyPI · bugsink · fixed in 2.2.2
- CVE-2026-48785Apptainer: Incorrect path matching for 'limit container paths' directiveGo · github.com/apptainer/apptainer · fixed in 1.5.1
- CVE-2026-54549Meta Ads MCP: Server-Side Request Forgery (SSRF) in `upload_ad_image` via Unrestricted `image_url` FetchPyPI · meta-ads-mcp · fixed in 1.0.115
- CVE-2026-54547Meta Ads MCP: X-Pipeboard-Token Header Auth Bypass Reuses Operator Meta TokenPyPI · meta-ads-mcp · fixed in 1.0.115
- CVE-2026-55225Strimzi: Cross-namespace privilege escalation via `Kafka.spec.entityOperator`Maven · io.strimzi:strimzi · fixed in 1.0.1
- CVE-2026-55226Strimzi: Unrestricted access to all Secrets within namespace watched by the Topic operatorMaven · io.strimzi:strimzi · fixed in 1.0.1