Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-54076ArcadeDB: Read-only users can mutate database schema (incomplete fix of CVE-2026-44221)Maven · com.arcadedb:arcadedb-engine · fixed in 26.6.1
- CVE-2026-55828qbee transport: Symlink-chain path traversal in tar extraction (one level outside destination)Go · go.qbee.io/transport · fixed in 1.26.25
- CVE-2026-59973mcp-from-openapi: Bypass of OpenAPI external $ref SSRF fix in latest FrontMCP and mcp-from-openapinpm · @frontmcp/adapters, frontmcp +1 · fixed in 1.5.0, 2.5.0
- CVE-2026-47215Singularity: Incorrect path matching for 'limit container paths' directiveGo · github.com/sylabs/singularity, github.com/sylabs/singularity/v4 · fixed in 4.4.2
- CVE-2026-55701OpenTelemetry githubreceiver silently ignores configured required_headers authenticationGo · github.com/open-telemetry/opentelemetry-collector-contrib/receiver/githubreceiver · fixed in 0.151.0
- CVE-2026-50024GitHacker: Path traversal in ref/hash parsing enables existence oracle and hex-fragment exfiltration via a malicious .git serverPyPI · githacker · fixed in 1.1.8
- CVE-2026-55178GeoLens: Cross-dataset authorization bypass discloses private dataset metadata, schema, sample values, table rows, and raster/vector tile datanpm · @geolens/sdk · fixed in 1.2.3
- CVE-2026-61549Woodpecker: Privilege escalation via unrestricted serviceAccountName in the Kubernetes backendGo · github.com/woodpecker-ci/woodpecker, go.woodpecker-ci.org/woodpecker +2 · fixed in 3.16.0
- CVE-2026-50166Kuma: kumactl connects to control plane without verifying TLS certificate when no CA is configuredGo · github.com/kumahq/kuma, github.com/kumahq/kuma/v2 · fixed in 2.7.26, 2.11.14, 2.12.11 and more
- CVE-2026-52724kuma-dp connects to control plane without verifying TLS certificate when no CA is configuredGo · github.com/kumahq/kuma, github.com/kumahq/kuma/v2 · fixed in 2.7.26, 2.9.16, 2.11.14 and more
- CVE-2026-55617Hydro: Insufficient session expiration when recreating sessionsnpm · hydrooj · fixed in 5.0.2
- CVE-2026-47780free5GC: UDR Improper ueId validation in free5GC EE subscription handlers allows arbitrary identifier persistenceGo · github.com/free5gc/udr
- CVE-2026-48987pyLoad: Unbounded Memory Growth Leading to DoS and Potential DDoS in EventManagerPyPI · pyload-ng
- CVE-2026-48737pyLoad: SSRF guard bypass via IPv6 6to4/NAT64 transition wrappers of internal IPsPyPI · pyload-ng
- CVE-2026-53966XWiki Platform: Privilege escalation from edit to script right through Live Data editingMaven · org.xwiki.platform:xwiki-platform-livedata-livetable · fixed in 16.10.17, 17.4.10, 17.10.4 and more
- CVE-2026-55650Outerbase Studio: Stored XSS in Text Widget Leads to Authentication Token Exposurenpm · @outerbase/studio
- CVE-2026-53957Contentful MCP Server: export_space/import_space tools pass LLM-controlled `host`/`proxy` args to CMA client, redirecting server PAT to attacker-controlled endpointnpm · @contentful/mcp-server, @contentful/mcp-tools · fixed in 1.7.19, 0.4.5
- CVE-2026-54254Cyberdrop-DL: Pixeldrain API key shared with unverified thirdparty sitesPyPI · cyberdrop-dl-patched · fixed in 9.14.0
- CVE-2026-49446Cosmos: Authentication bypass via forward-auth header smuggling on Constellation tunnel in Cosmos-ServerGo · github.com/azukaar/cosmos-server · fixed in 0.22.19
- CVE-2026-54167Pipelines-as-Code GitHub App token request can be redirected via untrusted Enterprise Host headerGo · github.com/openshift-pipelines/pipelines-as-code · fixed in 0.48.0, 0.42.1, 0.39.6 and more
- CVE-2026-54168Pipelines-as-Code: Unscoped GitHub App installation token allows unauthorized access to private repositories via remote task resolutionGo · github.com/openshift-pipelines/pipelines-as-code · fixed in 0.37.8, 0.39.6, 0.42.1 and more
- CVE-2026-57586CodeRAG: Gradle Wrapper Execution During Dependency Discovery Enables Arbitrary Code ExecutionPyPI · agent-coderag · fixed in 1.3.1
- CVE-2026-59971MySQL MCP Server: Missing Origin/Host Validation in SSE Transport Enables Unauthenticated SQL Execution (DNS Rebinding / Direct Exposure)PyPI · mysql-mcp-server · fixed in 0.4.2
- CVE-2026-46495OpenDJ Pre-Auth RCE via Java Deserialization in JMX RMIMaven · org.openidentityplatform.opendj:opendj-server-legacy · fixed in 5.1.1
- CVE-2026-48722Nextflow: Incorrect default permissions in the nextflow auth login commandMaven · io.nextflow:nextflow · fixed in 25.10.6, 26.04.3
- CVE-2026-49254Dragonfly Manager OAuth provider client_secret disclosure via unauthenticated GET /api/v1/oauthGo · d7y.io/dragonfly/v2 · fixed in 2.4.4
- CVE-2026-54637Dragonfly scheduler v1 gRPC unauthenticated SSRF via attacker-controlled PeerHost in DownloadTinyFileGo · d7y.io/dragonfly/v2 · fixed in 2.4.4-rc.3
- CVE-2026-52827Kimai: Two-factor authentication bypass on the Kimai APIPackagist · kimai/kimai · fixed in 2.59.0
- CVE-2026-52822Kimai: Improper Authorization in Kimai Timesheet Restart and Duplicate Allows New Timesheets After Project Access RevocationPackagist · kimai/kimai · fixed in 2.58.0
- CVE-2026-52828Kimai: ExportTemplate CRUD Missing Authorization Check Allows Unauthorized TEAMLEAD AccessPackagist · kimai/kimai · fixed in 2.58.0