Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-54452safeurl: Missing IPv6 CIDR Ranges in BlocklistGo · github.com/doyensec/safeurl · fixed in 0.2.4
- CVE-2026-53496ExifReader HEIC/AVIF ISO-BMFF parser throws uncaught RangeError on truncated boxesnpm · exifreader · fixed in 4.40.1
- CVE-2026-84445gRPC-Go: Denial of Service (DoS) via crash due to missing `:authority` and `Host` headers in the xDS serversGo · google.golang.org/grpc · fixed in 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3 and more
- CVE-2026-54156node-opcua: Unbounded nonce cache enables unauthenticated heap exhaustion DoSnpm · node-opcua · fixed in 2.166.0
- CVE-2026-54155node-opcua: Missing nonce verification in UserNameIdentityToken authenticationnpm · node-opcua
- CVE-2026-57497webtransport-go: Memory Exhaustion Attack due to Buffering of Unknown CapsulesGo · github.com/quic-go/webtransport-go · fixed in 0.11.1
- CVE-2026-61701Laravel MagicLink: Insecure Deserialization of MagicLink Actions Leads to Remote Code ExecutionPackagist · cesargb/laravel-magiclink · fixed in 2.25.1
- CVE-2026-53708ContextForge: DNS TOCTOU race condition causes SSRF protection bypass (`/admin/gateways/test`)PyPI · mcp-contextforge-gateway · fixed in 1.0.3
- CVE-2026-55795Craft Commerce: Coupon Code Brute-Force via Rate Limit BypassPackagist · craftcms/commerce · fixed in 5.6.5, 4.11.2
- CVE-2026-55235langgraph-api: Relative webhook targets in LangGraph Server can reach in-process routes without authenticationPyPI · langgraph-api · fixed in 0.10.0
- CVE-2026-55236langgraph-api: Incomplete assistant authorization in LangGraph Server run creationPyPI · langgraph-api · fixed in 0.10.0
- CVE-2026-54529SQLAdmin: Unvalidated sortBy parameter in `ModelView` bypasses `column_sortable_list`PyPI · sqladmin · fixed in 0.27.1
- CVE-2026-61534Yayson: Prototype pollution in the Store/LegacyStore deserializationnpm · yayson · fixed in 4.3.0
- CVE-2026-47701OpenTelemetry Operator: ServiceMonitor bearerTokenFile reads arbitrary local file and sends contents as bearer authGo · github.com/open-telemetry/opentelemetry-operator · fixed in 0.152.0
- CVE-2026-54541Nimiq: Panic in TrieProof::verify via child_index unwrap on equal-length keyscrates.io · nimiq-primitives · fixed in 1.6.0
- CVE-2026-54542Nimiq: Out-of-bounds panic in KeyNibbles::Add from oversized child suffix in a deserialized proofcrates.io · nimiq-primitives · fixed in 1.6.0
- CVE-2025-24890gix-sec safe.directory protections absent for elevated administratorscrates.io · gix-sec · fixed in 0.13.3
- CVE-2026-57145PraisonAI: Arbitrary File Read/Write via `multiedit` Tool Without Path ValidationPyPI · praisonai · fixed in 4.6.61
- CVE-2026-57132PraisonAI: PRAISONAI_CALL_AUTH=disabled environment variable unconditionally disables authenticationPyPI · praisonai · fixed in 4.6.61
- CVE-2026-57131praisonai: Jobs API exposes agent-execution endpoints with no authenticationPyPI · praisonai · fixed in 4.6.59
- CVE-2026-57124PraisonAI UI MCP connect endpoint allows unauthenticated local command executionPyPI · praisonai · fixed in 4.6.59
- CVE-2026-57122PraisonAI: Webhook signature verification skipped (fail-open) when secret unset, allowing forged inbound webhooks (WhatsApp & Linear bots)PyPI · praisonai · fixed in 4.6.59
- CVE-2026-57127praisonai: recipe serve auth middleware silently disables itself when no secret is setPyPI · praisonai · fixed in 4.6.59
- CVE-2026-56839PraisonAI Code agent tools fail open without a workspace boundaryPyPI · praisonai · fixed in 4.6.59
- CVE-2026-57119PraisonAI: Unauthenticated Local File Inclusion via agent_file path in the Jobs APIPyPI · praisonai · fixed in 4.6.59
- CVE-2026-57129PraisonAI: Arbitrary File Read via `@file:` Mention Path TraversalPyPI · praisonaiagents · fixed in 1.6.59
- CVE-2026-57126praisonaiagents: SSRF guard validates literal IPs only and never resolves DNSPyPI · praisonaiagents · fixed in 1.6.59
- CVE-2026-57120PraisonAI: execute_code sandbox bypass: str.format C-level attribute access reads every blocklisted dunderPyPI · praisonaiagents · fixed in 1.6.59
- CVE-2026-57123PraisonAI: MCP SSE transport binds 0.0.0.0 with no authentication and no Origin validation; bundled SecurityConfig is never wired inPyPI · praisonaiagents · fixed in 1.6.59
- CVE-2026-57130PraisonAI: IMAP Command Injection via Unsanitized Email Search ParametersPyPI · praisonaiagents · fixed in 1.6.59