Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-52826Kimai: Improper Authorization in Kimai Project, Customer, and Activity Rate Edit Endpoints Allows Cross-Scope Rate ManipulationPackagist · kimai/kimai · fixed in 2.57.0
- CVE-2026-52823Kimai: Login CSRF in Kimai Timesheet Stop and Restart API Endpoints Allows Unauthorized State ChangesPackagist · kimai/kimai · fixed in 2.58.0
- CVE-2026-86818fast-uri vulnerable to mailto header injection via percent-encoded field-name desynchronizationnpm · fast-uri · fixed in 4.1.5
- CVE-2026-52824Kimai: Default APP_SECRET in Docker Image Enables Cookie Forgery and Account TakeoverPackagist · kimai/kimai · fixed in 2.58.0
- CVE-2026-52825Kimai: Improper Authorization in Kimai Team Member and Team Activity Assignment APIs Allows Expansion of Team Scope Beyond Authorized VisibilityPackagist · kimai/kimai · fixed in 2.58.0
- CVE-2026-52821Kimai: Improper Authorization in Kimai Activity Creation with Preset Project Allows Creation Under Unauthorized ProjectsPackagist · kimai/kimai · fixed in 2.57.0
- CVE-2026-52820Kimai: Timesheet PATCH/POST allows assigning to project outside user's team via query_builder OR-bypassPackagist · kimai/kimai · fixed in 2.57.0
- CVE-2026-52819Kimai: Teamlead authorization bypass in GET /api/timesheets allows reading other users' timesheet records without being teamlead of the targetPackagist · kimai/kimai · fixed in 2.57.0
- CVE-2026-57147praisonai-platform: default JWT signing secret 'dev-secret-change-me' enables token forgeryPyPI · praisonai-platform · fixed in 0.1.6
- CVE-2026-57148praisonai-platform 0.1.4 still boots on the hardcoded JWT secret dev-secret-change-me (default-open production guard)PyPI · praisonai-platform · fixed in 0.1.6
- CVE-2026-86472fast-uri vulnerable to inconsistent host case normalization via percent-encoded octetsnpm · fast-uri · fixed in 2.4.7, 3.1.8, 4.1.5
- CVE-2026-57140PraisonAI AgentOS exposes unauthenticated agent listing and invocationnpm · praisonai · fixed in 1.7.2
- CVE-2026-57139PraisonAI MCPServer exposes unauthenticated HTTP tools/callnpm · praisonai · fixed in 1.7.2
- CVE-2026-57133PraisonAI utility shell safe-command wrapper allowlist bypass via shell chainingnpm · praisonai · fixed in 1.7.2
- CVE-2026-57135PraisonAI SandboxExecutor network-isolated mode does not block non-proxy-aware network clientsnpm · praisonai · fixed in 1.7.2
- CVE-2026-57134PraisonAI MCPSecurity Basic/OAuth authentication policies accept invalid credentials without validationnpm · praisonai · fixed in 1.7.2
- CVE-2026-57138PraisonAI codeMode sandbox escape via Function constructornpm · praisonai · fixed in 1.7.2
- CVE-2026-57136PraisonAI SandboxExecutor allowedCommands bypass via shell chainingnpm · praisonai · fixed in 1.7.2
- CVE-2026-57137PraisonAI AgentLoop onToolCall approval runs after tool executionnpm · praisonai · fixed in 1.7.2
- CVE-2026-57141PraisonAI: Remote Code Execution via Sandbox Escape in `codeMode` Toolnpm · praisonai · fixed in 1.7.2
- CVE-2026-57112PraisonAI ToolsMCPServer legacy SSE transport accepts attacker Host/Origin and exposes registered toolsPyPI · praisonai, praisonaiagents · fixed in 4.6.59, 1.6.59
- CVE-2026-48717OpenAM OAuth Authorization Bypass via PKCE ChallengeMaven · org.openidentityplatform.openam:openam-oauth2 · fixed in 16.1.1
- CVE-2026-47426OpenAM OAuth Client Impersonation via JWKS Resolver CacheMaven · org.openidentityplatform.openam:openam-oauth2 · fixed in 16.1.1
- CVE-2026-47424OpenAM Authenticated RCE via Groovy Sandbox EscapeMaven · org.openidentityplatform.openam:openam-scripting · fixed in 16.1.1
- CVE-2026-41573OpenAM LDAP Injection via `_queryId` ParameterMaven · org.openidentityplatform.openam:openam-core-rest · fixed in 16.1.1
- CVE-2026-62280OpenAM Reflected XSS in the OAuth2/OIDC `wap` consent pageMaven · org.openidentityplatform.openam:openam-oauth2 · fixed in 16.1.2
- CVE-2026-45051OpenAM Pre-auth RCE via Java Deserialization in WebAuthn Authenticator StorageMaven · org.openidentityplatform.openam:openam-auth-webauthn · fixed in 16.1.1
- CVE-2026-62263OpenAM: WebAuthn Java deserialization RCE via ObjectInputFilter depth>1 bypassMaven · org.openidentityplatform.openam:openam-auth-webauthn · fixed in 16.1.2
- CVE-2026-46623OpenAM Account Takeover via Unverified Password Change in OAuth2 ModuleMaven · org.openidentityplatform.openam:openam-auth-oauth2 · fixed in 16.1.1
- CVE-2026-46619OpenAM Authentication Bypass via MSISDN LDAP InjectionMaven · org.openidentityplatform.openam:openam-auth-msisdn · fixed in 16.1.1