Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-85396rubyzip before 3.4.0 Path Traversal in Zip::Entry#extract via Sibling-Directory PrefixRubyGems · rubyzip · fixed in 3.4.0
- CVE-2026-85394python-jose through 3.5.0 Algorithm Confusion via DER-encoded Public Key as HMAC SecretPyPI · python-jose · fixed in 3.4.0
- CVE-2026-85393node-forge through 1.4.0 RSA PKCS#1 v1.5 Signature Forgery via Nested DigestAlgorithm Paddingnpm · node-forge · fixed in 1.4.0
- CVE-2026-49456Waku: Open Redirect via `unstable_redirect` Helpernpm · waku · fixed in 1.0.0-beta.1
- CVE-2026-49455Waku: Cross-Origin CSRF on RSC Server Action Dispatchnpm · waku · fixed in 1.0.0-beta.1
- CVE-2026-75602OpenList: Authenticated arbitrary file write via Content-Disposition path traversal in SimpleHttp offline-download toolGo · github.com/openlistteam/openlist, github.com/openlistteam/openlist/v3 +1 · fixed in 4.2.3
- CVE-2026-53720pymonocypher: Potential heap buffer overflow on nb_blocks in argon2i_32 when provided buffer is too smallPyPI · pymonocypher · fixed in 4.0.2.8
- CVE-2026-50554Note Mark: Unauthenticated disclosure of soft-deleted note metadata via deleted=true on public books in note-markGo · github.com/enchant97/note-mark/backend · fixed in 0.0.0-20260601210758-9c9b72740f22
- CVE-2026-85175SiYuan before v3.8.2 TLS Private Key Disclosure via getFileGo · github.com/siyuan-note/siyuan/kernel · fixed in 0.0.0-20260819144130-256d73aa7f94
- CVE-2026-84394fast-uri vulnerable to host confusion via an unclosed bracket in the URI authoritynpm · fast-uri · fixed in 2.4.6, 3.1.7, 4.1.4
- CVE-2026-84292fast-uri vulnerable to authority injection via an unvalidated port in serializenpm · fast-uri · fixed in 2.4.6, 3.1.7, 4.1.4
- CVE-2026-56855Prevent DoS on deadlocked established channel in golang.org/x/crypto/sshGo · golang.org/x/crypto · fixed in 0.56.0
- CVE-2026-78662Prevent DoS on deadlocked undecided channel in golang.org/x/crypto/sshGo · golang.org/x/crypto · fixed in 0.56.0
- CVE-2026-84452Windows ML CLI: CORS misconfig enables localhost RCEPyPI · winml-cli · fixed in 0.4.0
- CVE-2026-84382HTTPX2: Streaming response decompression does not bound peak memory (decompression amplification)PyPI · httpx2 · fixed in 2.12.0
- CVE-2026-84381HTTPX2: Secure WebSocket traffic sent without TLS through SOCKS proxiesPyPI · httpcore2, httpx2 · fixed in 2.10.0
- CVE-2026-84380HTTPX2: Conflicting Content-Length and Transfer-Encoding headers can be auto-generatedPyPI · httpx2 · fixed in 2.11.0
- CVE-2026-84379HTTPX2: Multipart part header injection via unvalidated file Content-Type and custom headersPyPI · httpx2 · fixed in 2.11.0
- CVE-2026-84378HTTPX2: Quadratic SSE line buffering can cause CPU denial of servicePyPI · httpx2 · fixed in 2.10.0
- CVE-2026-53649Joro: Unauthenticated Cross-Origin Plugin Upload Leads to RCEGo · github.com/bishopfox/joro · fixed in 0.0.0-20260601151442-5c0ca35db828
- CVE-2026-49832DSpace: Remote Code Execution (RCE) possible in Velocity Templates used by LDNMaven · org.dspace:dspace-api · fixed in 8.4, 9.3, 10.0
- CVE-2026-84377LiteLLM: Authenticated SSRF and provider-credential exfiltration via unvalidated request-body routing parametersPyPI · litellm · fixed in 1.88.6, 1.89.7, 1.90.7 and more
- CVE-2026-49833DSpace: Path Traversal possible in LDN message generationMaven · org.dspace:dspace-api · fixed in 8.4, 9.3, 10.0
- CVE-2026-49831DSpace: Curation Task Reporter output path is not restricted to trusted directories (Path Traversal Vulnerability)Maven · org.dspace:dspace-api · fixed in 7.6.7, 8.4, 9.3 and more
- CVE-2026-49830DSpace: ORE resource URI does not validate scheme for non-web resourcesMaven · org.dspace:dspace-api · fixed in 7.6.7, 8.4, 9.3 and more
- CVE-2026-52831Nuclio: Unsanitized cron trigger event headers/body injected into CronJob shell command leads to persistent RCEGo · github.com/nuclio/nuclio · fixed in 0.0.0-20260601075854-3356b86a8bfa
- CVE-2026-52833Nuclio: Unsanitized runtimeAttributes.repositories injected into Groovy build.gradle leads to build-time RCEGo · github.com/nuclio/nuclio · fixed in 1.16.5
- CVE-2026-52832Nuclio: Unauthenticated path traversal in spec.handler allows arbitrary file write in Dashboard containerGo · github.com/nuclio/nuclio · fixed in 1.16.5
- CVE-2026-82404TOON: Prototype pollution when decoding untrusted TOON inputnpm · @toon-format/toon · fixed in 2.3.1
- CVE-2026-84376Astro: Authorization bypass from missing path-segment boundary check when stripping the configured basenpm · astro · fixed in 7.2.4