Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-88018rclone serve s3: --auth-proxy without --auth-key authenticates nobody - full SigV4 signature bypassGo · github.com/rclone/rclone · fixed in 1.75.1
- CVE-2026-88017rclone: FTP cross-session auth-proxy backend confusionGo · github.com/rclone/rclone · fixed in 1.75.1
- CVE-2026-88016rclone: Directory metadata (chmod/chown/chtimes) applied through a planted symlink in rclone local --links escapes the destinationGo · github.com/rclone/rclone · fixed in 1.75.1
- CVE-2026-88015rclone local: crafted Range request against a translated symlink panics (DoS)Go · github.com/rclone/rclone · fixed in 1.75.1
- CVE-2026-88014rclone archive/zip: Zip Slip via unsanitized zip entry names lets a malicious archive escape its own namespaceGo · github.com/rclone/rclone · fixed in 1.75.1
- CVE-2026-88013rclone: http backend forwards custom/auth headers to a different host on redirectGo · github.com/rclone/rclone · fixed in 1.75.1
- CVE-2026-88012Traefik: respondingTimeouts.readTimeout is not applied to HTTP/3, leaving slow-body uploads unboundedGo · github.com/traefik/traefik, github.com/traefik/traefik/v2 +1 · fixed in 2.11.56, 3.7.12
- CVE-2026-88011Traefik: ForwardAuth identity spoofing via dot-form header aliasGo · github.com/traefik/traefik, github.com/traefik/traefik/v2 +1 · fixed in 2.11.56, 3.7.12
- CVE-2026-88009Traefik: Rootless HTTP/1 request-target routes as "/" but is forwarded verbatim, bypassing path-scoped routing, middleware guards and access loggingGo · github.com/traefik/traefik, github.com/traefik/traefik/v2 +1 · fixed in 2.11.57, 3.7.13
- CVE-2026-88008Traefik: Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') and Incorrect AuthorizationGo · github.com/traefik/traefik, github.com/traefik/traefik/v2 +1 · fixed in 2.11.57, 3.7.13
- CVE-2026-88007Traefik HTTP/3 Backend NTLM Connection ReuseGo · github.com/traefik/traefik, github.com/traefik/traefik/v2 +1 · fixed in 2.11.57, 3.7.13
- CVE-2026-88006Open WebUI: Users denied by the OAuth role policy can still sign in via token exchangePyPI · open-webui · fixed in 0.11.1
- CVE-2026-88005Open WebUI: Users denied by the OAuth domain allowlist or role policy can still sign in via token exchangePyPI · open-webui · fixed in 0.9.0
- CVE-2026-88004Traefik entrypoint header-name sanitization bypassed via request trailersGo · github.com/traefik/traefik, github.com/traefik/traefik/v2 +1 · fixed in 3.7.13
- CVE-2026-88879Traefik before v2.11.56 Identity Spoofing via Header AliasGo · github.com/traefik/traefik, github.com/traefik/traefik/v2 +1 · fixed in 2.11.56, 3.7.12
- CVE-2026-88878Traefik v2.8.2 through v3.6 HTTP/3 Timeout BypassGo · github.com/traefik/traefik, github.com/traefik/traefik/v2 +1 · fixed in 2.11.56, 3.7.12
- CVE-2026-84939Apache FreeMarker, Apache FreeMarker: A malformed locale may be exploitable for path traversal attacksMaven · org.freemarker:freemarker · fixed in 2.3.35
- CVE-2026-88002Open WebUI: Any authenticated user can hang the server via a cyclic chat message historyPyPI · open-webui · fixed in 0.11.1
- CVE-2026-88001Open WebUI: Server-side fetches reach blocked and internal hosts via unvalidated HTTP redirect targetsPyPI · open-webui · fixed in 0.11.1
- CVE-2026-88000Open WebUI: Any authenticated user can hang the server via message deletion in a cyclic chat treePyPI · open-webui · fixed in 0.11.1
- CVE-2026-87999Open WebUI: Any authenticated user can reach the Azure platform channel via server-side web fetchPyPI · open-webui · fixed in 0.11.1
- CVE-2026-87998Open WebUI: Non-admin users can delete admin-owned external knowledge connections via knowledge base deletionPyPI · open-webui · fixed in 0.11.1
- CVE-2026-87997Open WebUI: Any authenticated user can inject chats into another user's folder via chat completionsPyPI · open-webui · fixed in 0.11.1
- CVE-2026-87996Open WebUI: SSRF into internal services via DNS rebinding in the Playwright web loaderPyPI · open-webui · fixed in 0.11.1
- CVE-2026-87995Open WebUI: Same-origin XSS to account takeover via terminal port-preview iframe hardcoding allow-same-originPyPI · open-webui · fixed in 0.11.1
- CVE-2026-87994Open WebUI: Channel members can overwrite another member's message via the chat completions endpointPyPI · open-webui · fixed in 0.11.1
- CVE-2026-87017Open WebUI: Inaccessible knowledge bases are exposed through the built-in knowledge tool on most vector backendsPyPI · open-webui · fixed in 0.11.1
- CVE-2026-87016Open WebUI: Sign-in as another user via wildcard characters in the OAuth subject claim on SQLitePyPI · open-webui · fixed in 0.11.1
- CVE-2026-87015Open WebUI: A user's session cookies are sent to tool servers configured for bearer authenticationPyPI · open-webui · fixed in 0.11.1
- CVE-2026-87014Open WebUI: Admin demoted through SSO role sync keeps read and write access to all users' notesPyPI · open-webui · fixed in 0.11.1