Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-49865Kimai has Server-Side Request Forgery in Invoice PDF Rendering via Markdown Image URLsPackagist · kimai/kimai · fixed in 2.58.0
- CVE-2026-54174melange: Incomplete package integrity verification allows data section substitutionGo · chainguard.dev/apko, chainguard.dev/melange · fixed in 1.2.9, 0.50.4
- CVE-2026-49439OpenRemote read-only asset users can write predicted datapointsMaven · io.openremote:openremote-manager · fixed in 1.24.1
- CVE-2026-49464NL Portal: IDOR allows any authenticated user to complete and tamper with another user's taakMaven · nl.nl-portal:taak · fixed in 3.0.1
- CVE-2026-49463NL Portal: Missing per-user authorization on document and decision GraphQL queries in nl-portal-backend-librariesMaven · nl.nl-portal:besluiten, nl.nl-portal:documenten-api · fixed in 3.0.1
- CVE-2026-54072Authorizer: Unvalidated redirect_uri in /authorize leaks OAuth2 tokens to attacker-controlled URLGo · github.com/authorizerdev/authorizer · fixed in 0.0.0-20260409051328-bd3f5baf6d3d
- CVE-2026-89090Denial of service in the event stream header decoder in AWS SDK for Go v2Go · github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream, github.com/aws/aws-sdk-go-v2/service/bedrockagentcore +10 · fixed in 1.7.8, 1.15.2, 1.51.8 and more
- CVE-2026-68497jackson-databind: unbounded numeric parse in Duration and XMLGregorianCalendar deserialization allows CPU denial of serviceMaven · com.fasterxml.jackson.core:jackson-databind, tools.jackson.core:jackson-databind · fixed in 2.18.10, 2.21.6, 2.22.2 and more
- CVE-2026-71416Headroom vulnerable to Cross-Site WebSocket Hijacking (CSWSH)PyPI · headroom-ai · fixed in 0.35.0
- CVE-2026-87776compression vulnerable to Denial of Service via memory leak on premature response closenpm · compression · fixed in 1.8.2
- CVE-2026-87859morgan vulnerable to Log Injection via unescaped double quote in quoted log fieldsnpm · morgan · fixed in 1.12.1
- CVE-2026-49838GoBGP confederation validation panics on empty AS_PATH attributeGo · github.com/osrg/gobgp/v4 · fixed in 4.7.0
- CVE-2026-49837GoBGP: BGP OPEN capability parser may read capability values outside declared CapLen boundariesGo · github.com/osrg/gobgp/v4 · fixed in 4.6.0
- CVE-2026-49836psd-tools: arbitrary file write via smart-object filenamePyPI · psd-tools · fixed in 1.17.1
- CVE-2026-88062OmniRoute ACP Custom-Agent Remote Code Execution (RCE)npm · omniroute
- CVE-2026-88060Angular: SSR XSS via Unescaped <template> Content Across DocumentFragment Boundaries in Fallback Raw-Content Elementsnpm · @angular/platform-server · fixed in 22.1.4, 21.2.22, 20.3.30
- CVE-2026-88059Angular: Information Leak via `HttpTransferCache` Bypass When Using `withRequestsMadeViaParent`npm · @angular/common · fixed in 22.1.1, 21.2.20, 20.3.28
- CVE-2026-88058Angular: SSR XSS via Unescaped Processing Instruction (<?...?>) Nodes in Fallback Raw-Content Elementsnpm · @angular/platform-server · fixed in 22.1.4, 21.2.22, 20.3.30
- CVE-2026-88057Angular: Sanitization bypass via directive host bindings on concrete host elements in @angular/core and @angular/compilernpm · @angular/compiler, @angular/core · fixed in 22.1.0, 21.2.20, 20.3.28
- CVE-2026-88056Angular: SSRF and Cross-Origin Credential Disclosure via URL Resolution Discrepancy in SSRnpm · @angular/platform-server · fixed in 22.1.4, 21.2.22, 20.3.30
- CVE-2026-88029GridFS data disclosure and deletion via query-operator injection in file IDs in the MongoDB Python DriverPyPI · pymongo · fixed in 4.18.1
- CVE-2026-88023GridFS data disclosure and deletion via query-operator injection in file IDs in the MongoDB PHP LibraryPackagist · mongodb/mongodb · fixed in 1.24.5, 2.4.2
- CVE-2026-88046rclone: source object names can escape the configured root on uploadGo · github.com/rclone/rclone · fixed in 1.75.1
- CVE-2026-88045rclone: S3 multipart declared-length memory exhaustionGo · github.com/rclone/rclone · fixed in 1.75.1
- CVE-2026-88044rclone: RC per-server auth-proxy bypassGo · github.com/rclone/rclone · fixed in 1.75.1
- CVE-2026-88018rclone serve s3: --auth-proxy without --auth-key authenticates nobody - full SigV4 signature bypassGo · github.com/rclone/rclone · fixed in 1.75.1
- CVE-2026-88017rclone: FTP cross-session auth-proxy backend confusionGo · github.com/rclone/rclone · fixed in 1.75.1
- CVE-2026-88016rclone: Directory metadata (chmod/chown/chtimes) applied through a planted symlink in rclone local --links escapes the destinationGo · github.com/rclone/rclone · fixed in 1.75.1
- CVE-2026-88015rclone local: crafted Range request against a translated symlink panics (DoS)Go · github.com/rclone/rclone · fixed in 1.75.1
- CVE-2026-88014rclone archive/zip: Zip Slip via unsanitized zip entry names lets a malicious archive escape its own namespaceGo · github.com/rclone/rclone · fixed in 1.75.1