Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-54251netty-incubator-codec-ohttp: [OHttpServerCodec] Native Direct-Memory Leak on AEAD Decryption Failure Leads to Gateway Denial of ServiceMaven · io.netty.incubator:netty-incubator-codec-ohttp · fixed in 0.0.23.Final
- CVE-2026-54050Sakai: IDOR in Profile Image Deletion Allows Any Authenticated User to Delete Any User's Profile ImageMaven · org.sakaiproject.profile2:profile2-api, org.sakaiproject.profile2:profile2-impl · fixed in 23.5
- CVE-2026-44300OpenCost ServiceKey Endpoint Unauthorized Credential Overwrite/InjectionGo · github.com/opencost/opencost · fixed in 1.119.1
- CVE-2026-53941Inspektor Gadget Uprobe gadgets: unprivileged container's ld.so.cache causes high CPU utilization and container startup DoSGo · github.com/inspektor-gadget/inspektor-gadget · fixed in 0.53.1
- CVE-2026-44778Inspektor Gadget: Unprivileged container can crash USDT note parser via crafted ELFGo · github.com/inspektor-gadget/inspektor-gadget · fixed in 0.53.1
- CVE-2026-58201Lokka: Azure Resource Manager URL path validation issuenpm · @merill/lokka · fixed in 2.1.2
- CVE-2026-53710MCP Context Forge: RestrictedPython sandbox bypass via getattr builtin in python_sandbox_serverPyPI · mcp-contextforge-gateway · fixed in 1.0.2
- CVE-2026-55863motionEye: Missing authentication on ActionHandler allows unauthenticated camera action executionPyPI · motioneye · fixed in 0.44.0
- CVE-2026-46488motionEye: Authentication possible via password hashPyPI · motioneye · fixed in 0.44.0
- CVE-2026-63443Coder: Workspace agent API insecure redirect handling allowed cross-agent file read and writeGo · github.com/coder/coder, github.com/coder/coder/v2 · fixed in 2.29.19, 2.32.9, 2.33.10 and more
- CVE-2026-54503plone.app.textfield: Stored XSS by spoofing mime typePyPI · plone-app-textfield · fixed in 2.0.2, 3.0.2, 4.0.1
- CVE-2026-53658Fabric CA: LDAP Injection via Unescaped Username in GetUser FilterGo · github.com/hyperledger/fabric-ca · fixed in 1.5.21
- CVE-2026-59160Yeger: Unauthenticated Network-Exposed Turborepo Task Execution via /api/runnpm · @yeger/turbo-graph · fixed in 2.8.12
- CVE-2026-55691EmbedVideo Extension : Stored XSS via unsanitized class passed to templatePackagist · starcitizenwiki/embedvideo · fixed in 4.1.0
- CVE-2026-55690EmbedVideo Extension: Stored XSS via unsanitized service name in exception textPackagist · starcitizenwiki/embedvideo · fixed in 4.1.0
- CVE-2026-55692EmbedVideo Extension: Stored XSS via malformed src url with $wgEmbedVideoRequireConsent enabledPackagist · starcitizenwiki/embedvideo · fixed in 4.1.0
- CVE-2026-54561MCP Memory Keeper: Arbitrary local file read in mcp-memory-keeper context_import via unvalidated filePathnpm · mcp-memory-keeper · fixed in 0.13.0
- CVE-2026-55149Vouch Proxy: Unbounded Multipart Cookie Allocation DoSGo · github.com/vouch/vouch-proxy · fixed in 0.48.0
- CVE-2026-58200@jhb.software/payload-cloudinary-plugin: Arbitrary Cloudinary API Parameter Signingnpm · @jhb.software/payload-cloudinary-plugin · fixed in 0.4.0
- CVE-2026-59965@jhb.software/payload-alt-text-plugin: Alt Text Endpoint Authorization Bypass via Payload Local API `overrideAccess` Omissionnpm · @jhb.software/payload-alt-text-plugin · fixed in 0.8.0
- CVE-2026-58196ToolHive: SSRF in remote MCP server authentication discovery (host-side, bypasses container isolation)Go · github.com/stacklok/toolhive · fixed in 0.31.0
- CVE-2026-54450ToolHive: SSRF guard misses IPv6 NAT64 ranges (64:ff9b::/96, 64:ff9b:1::/48), allowing metadata/internal access behind a NAT64 gatewayGo · github.com/stacklok/toolhive · fixed in 0.29.1
- CVE-2026-59157webhookd: Unrestricted HTTP Header to Shell Variable InjectionGo · github.com/ncarlier/webhookd · fixed in 1.22.0
- CVE-2026-55887MCP Gateway: Argument injection via OCI image label YAML in Docker MCP GatewayGo · github.com/docker/mcp-gateway · fixed in 0.42.2
- CVE-2026-55770OpenBao: LDAPi ldaputil (wrong escape func)Go · github.com/openbao/openbao · fixed in 0.0.0-20260617104213-10b7825c714c
- CVE-2026-55776OpenBao: Transit secrets engine crashes on key creation with `derived: true` for asymmetric key typesGo · github.com/openbao/openbao · fixed in 0.0.0-20260617104123-db57c62602b2
- CVE-2026-55774OpenBao: Cross-namespace lease revocation/renewal via canonical sys/leases/{revoke,renew} — incomplete fix of CVE-2026-45808Go · github.com/openbao/openbao · fixed in 0.0.0-20260617103932-b20b999dd404
- CVE-2026-55775OpenBao's System Backend allows Unauthorized Management of the containing NamespaceGo · github.com/openbao/openbao · fixed in 0.0.0-20260617103935-d3c1cc64b1ae
- CVE-2026-44163fluent-plugin-opentelemetry: Denial of Service (DoS) via Large Payloads and Decompression Bombs in `in_opentelemetry`RubyGems · fluent-plugin-opentelemetry · fixed in 0.5.3
- CVE-2026-55591Signal K Server: Server-Side Request Forgery via Remote Connection Endpointsnpm · signalk-server · fixed in 2.28.0