Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-47253Anyquery: Path Traversal in `clear_plugin_cache` Allows Arbitrary Directory DeletionGo · github.com/julien040/anyquery · fixed in 0.4.5
- CVE-2026-54447garminconnect: Insecure Permission Assignment for Garmin OAuth Token StorePyPI · garminconnect · fixed in 0.3.5
- CVE-2026-55209resdata insufficiently validates untrusted GRDECL filesPyPI · resdata · fixed in 6.2.9
- CVE-2026-73497MCP Atlassian is a Model Context Protocol (MCP): DNS-rebinding TOCTOU bypass of the SSRF fix (CVE-2026-27826): unauthenticated SSRF to cloud metadataPyPI · mcp-atlassian · fixed in 0.22.0
- CVE-2026-73496MCP Atlassian: Arbitrary server-side file read via attachment uploadPyPI · mcp-atlassian · fixed in 0.22.0
- CVE-2026-55093tract-nnef: integer overflow in NNEF `.dat` tensor parser yields an out-of-bounds read on model loadcrates.io · tract-nnef · fixed in 0.23.1, 0.22.2, 0.21.16
- CVE-2026-59178ESPHome Device Builder: Renamed auth env vars silently disable dashboard authentication on upgradePyPI · esphome-device-builder · fixed in 1.0.12
- CVE-2026-55832Tract: Arbitrary file read via unsanitized ONNX external_data `location` (path traversal) on model load in tract-onnxcrates.io · tract-onnx · fixed in 0.21.17, 0.22.3, 0.23.2
- CVE-2026-54181backpack/crud: Stored XSS in the color column — the `@if($column['escaped'])` branches are invertedPackagist · backpack/crud · fixed in 6.8.14, 7.0.38
- CVE-2026-54177backpack/crud: HasUploadFields keeps the attacker-supplied file extension — public-disk uploads of `shell.php` reach the webserverPackagist · backpack/crud · fixed in 6.8.14, 7.0.38
- CVE-2026-54176backpack/crud: MyAccountController allows changing the login email without a current-password checkPackagist · backpack/crud · fixed in 6.8.14, 7.0.38
- CVE-2026-54180backpack/crud: CRUD panel query scopes are not enforced on Update, Delete, and Reorder (cross-tenant IDOR)Packagist · backpack/crud · fixed in 6.8.14, 7.0.38
- CVE-2026-57570backpack/crud: HasMany/MorphMany relation fields allow cross-tenant record re-parenting (IDOR) via attachManyRelationPackagist · backpack/crud · fixed in 7.0.47, 6.8.15
- CVE-2026-54178backpack/crud: Arbitrary file deletion via attacker-controlled clear_<attr>[] in HasUploadFields::uploadMultipleFilesToDiskPackagist · backpack/crud · fixed in 6.8.12, 7.0.35
- CVE-2026-54182backpack/crud: OS command injection in Stats::makeCurlRequest via attacker-controlled Host header (pre-auth)Packagist · backpack/crud · fixed in 4.1.72, 5.6.2, 6.8.13 and more
- CVE-2026-54175backpack/crud: Unverified password change in MyAccountController via mass assignmentPackagist · backpack/crud · fixed in 6.8.11, 7.0.34
- CVE-2026-44162fluent-plugin-s3: Denial of Service (DoS) via Decompression Bomb in `in_s3`RubyGems · fluent-plugin-s3 · fixed in 1.8.5
- CVE-2026-57583OpenZeppelin Contracts Wizard: Line terminators in info.securityContact / info.license can inject lines into generated sourcenpm · @openzeppelin/wizard, @openzeppelin/wizard-cairo +2 · fixed in 0.10.11, 3.0.1, 0.6.2 and more
- CVE-2026-54723devpi: Database contents leakPyPI · devpi-server · fixed in 6.20.2
- CVE-2026-73494blaze: Multiple HTTP/1.1 request-smuggling primitives in blaze's Java wire parserMaven · org.http4s:blaze-http_2.13, org.http4s:blaze-http_3 +1 · fixed in 0.23.18, 1.0.0-M42
- CVE-2026-53752docx4j: Stack Overflow via Cyclic `w:basedOn` Style Chain leads to Denial of ServiceMaven · org.docx4j:docx4j-core · fixed in 11.5.14
- CVE-2026-53659http4k: Unbounded gzip decompression in `ServerFilters.GZip` / `RequestFilters.GunZip` allowed memory-exhaustion DoSMaven · org.http4k:http4k-core · fixed in 6.49.0.0, 5.42.0.0
- CVE-2026-47256OpenTelemetry: Path traversal in Sentry exporter via attacker-controlled service.name reaches privileged Sentry API endpoints with operator bearer tokenGo · github.com/open-telemetry/opentelemetry-collector-contrib/exporter/sentryexporter · fixed in 0.154.0
- CVE-2026-55091flat-to-nested: Prototype pollution in flat-to-nested convert() via __proto__ parent/id keynpm · flat-to-nested · fixed in 1.1.2
- CVE-2026-54150next-video: Unauthenticated arbitrary file read via /api/video request handlernpm · next-video · fixed in 2.8.1
- CVE-2026-55866SpiceDBChecks involving relations with caveats can result in unconditional permission when conditional permission is expectedGo · github.com/authzed/spicedb · fixed in 1.54.0
- CVE-2026-55847Allure: Stored XSS via unescaped ANSI helper in Allure report status message/trace renderingMaven · io.qameta.allure:allure-generator · fixed in 2.39.0
- CVE-2026-55846Allure: Path Traversal in Allure Report HTTP Server Allows Arbitrary File ReadMaven · io.qameta.allure:allure-commandline · fixed in 2.39.0
- CVE-2026-53495containerd CRI ExecSync Goroutine Leak Leading to Node-Level Denial of ServiceGo · github.com/containerd/containerd, github.com/containerd/containerd/v2 · fixed in 1.7.35, 2.0.12, 2.2.8 and more
- CVE-2026-54567Flask-Reuploaded: Extension-denylist bypass via case-folding asymmetry in name-override path (incomplete-fix variant of CVE-2026-27641)PyPI · flask-reuploaded · fixed in 1.6.0