Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
n8n: Privilege Escalation and Code Execution via Full Public API Key Scope Assignment to Token Exchange JWTs CVE-2026-65595, GHSA-777w-rpr6-c52h | High | 0.7% | 22 Jul, 2026 | npm n8n |
n8n: Stored DOM XSS via Resource Locator `cachedResultUrl` CVE-2026-65592, GHSA-9wcp-9r3j-383q | High | 0.2% | 22 Jul, 2026 | npm n8n |
n8n: Legacy Expression Evaluator Sanitizer Bypass Leads to Authenticated Code Execution CVE-2026-65591, GHSA-pm35-fqvh-cq5g | High | 0.7% | 22 Jul, 2026 | npm n8n |
n8n: SSO Instance-Role Provisioning Allows Privilege Escalation to Instance Owner CVE-2026-65016, GHSA-35q8-9mj6-wjmf | High | 0.4% | 22 Jul, 2026 | npm n8n |
n8n: AI Agents Project Viewer Privilege Escalation via run_node_tool CVE-2026-65015, GHSA-x5vx-c2c8-m3w9 | High | 0.6% | 22 Jul, 2026 | npm n8n |
sharp inherited vulnerabilities in libvips: CVE-2026-33327, CVE-2026-33328, CVE-2026-35590, CVE-2026-35591 CVE-2026-114113, GHSA-f88m-g3jw-g9cj | High | 0.1% | 21 Jul, 2026 | npm sharp |
fast-xml-parser: Repeated DOCTYPE declarations reset entity expansion limits CVE-2026-73569, GHSA-8r6m-32jq-jx6q | High | 0.5% | 21 Jul, 2026 | npm fast-xml-parser |
SVGO removeScripts plugin leaves some executable scripts intact CVE-2026-73650, GHSA-2p49-hgcm-8545 | High | 0.4% | 21 Jul, 2026 | npm svgo |
react-server-dom: Denial of Service in Server Functions CVE-2026-44907, GHSA-wx67-qw84-cm4g | High | 0.6% | 21 Jul, 2026 | npm react-server-dom-parcel npm react-server-dom-turbopack npm react-server-dom-webpack |
Axios Node HTTP adapter can use an inherited proxy after interceptor config cloning CVE-2026-67320, GHSA-gcfj-64vw-6mp9 | High | 0.5% | 20 Jul, 2026 | npm axios |
fast-uri vulnerable to host confusion via literal backslash authority delimiter CVE-2026-16221, GHSA-v2hh-gcrm-f6hx | High | 0.4% | 19 Jul, 2026 | npm fast-uri |
CloudTAK: Authenticated full-read SSRF in the /api/esri* routes — user-controlled URL fetched with no IP-classification guard CVE-2026-55177, GHSA-r95q-fp26-h3hc | High | 0.4% | 17 Jul, 2026 | npm @tak-ps/cloudtak |
Genql: inject arbitrary JavaScript or TypeScript via a GraphQL schema CVE-2026-63397, GHSA-w757-xvvv-vgfw | High | 0.5% | 16 Jul, 2026 | npm @genql/cli |
Whistle vulnerable to path traversal CVE-2026-55629, GHSA-3vfr-4gwf-qxfp | High | 0.6% | 16 Jul, 2026 | npm whistle |
Prompty: Arbitrary file read via file reference expansion CVE-2026-53598, GHSA-wxhm-2mq7-7697, PYSEC-2026-3538 | High | 1.3% | 16 Jul, 2026 | NuGet Prompty.Core PyPI prompty crates.io prompty npm @prompty/core |
Prompty: Arbitrary code execution via JavaScript frontmatter in TypeScript loader CVE-2026-53597, GHSA-c4gh-rv8h-q9vw | High | 1.0% | 16 Jul, 2026 | npm @prompty/core |
@andrea9293/mcp-documentation-server: Web UI API binds to all interfaces without authentication by default CVE-2026-54504, GHSA-6f5r-5672-72j7 | High | 0.6% | 15 Jul, 2026 | npm @andrea9293/mcp-documentation-server |
systeminformation: OS command injection in networkInterfaces() via interfaces(5) source-directive path on Linux CVE-2026-50289, GHSA-5xpp-75jx-m839 | High | 3.6% | 15 Jul, 2026 | npm systeminformation |
dd-trace-js: Improper parsing of W3C baggage headers may lead to DoS CVE-2026-50272, GHSA-wxqq-gcq8-c443 | High | 0.8% | 15 Jul, 2026 | npm dd-trace |
obsidian-local-rest-api: Authenticated path traversal via URL-encoded %2F in /vault/{path} — arbitrary host file read/write/delete GHSA-62gx-5q78-wrvx | High | Not scored | 15 Jul, 2026 | npm obsidian-local-rest-api |
9router: Mass assignment in PATCH /api/settings allows authenticated authorization downgrade CVE-2026-56679, GHSA-vmjq-hvgq-2wv4 | High | 0.4% | 15 Jul, 2026 | npm 9router |
jsii-diff: Command Injection via npm: package argument CVE-2026-15895, GHSA-wcx4-wpfv-mc5c | High | 1.1% | 15 Jul, 2026 | npm jsii-diff |
@better-auth/sso: SSO provider may allow registration for any org member without a checking their role CVE-2026-53515, GHSA-gv74-j8m3-fg5f | High | 0.4% | 15 Jul, 2026 | npm @better-auth/sso |
Directus: Authorization-dependent response served from unsegmented cache key CVE-2026-61836, GHSA-c6w9-5g5j-jh2p | High | 0.5% | 15 Jul, 2026 | npm directus |
Directus: SSRF Protection Bypass via 0.0.0.0 in File Import CVE-2026-61835, GHSA-j5h6-vqc3-phqh | High | 0.4% | 15 Jul, 2026 | npm directus |
SAP Approuter has an Open Redirect vulnerability CVE-2026-44745, GHSA-44p5-3m5g-vfhj | High | 0.5% | 14 Jul, 2026 | npm @sap/approuter |
OpenClaw Feishu permission tools could ignore per-account disablement CVE-2026-62188, GHSA-w8wf-3qvj-6xqf | High | 0.4% | 13 Jul, 2026 | npm @openclaw/feishu |
OpenClaw Feishu tools could ignore per-account disablement CVE-2026-62187, GHSA-2q7j-2vhx-56g8 | High | 0.4% | 13 Jul, 2026 | npm @openclaw/feishu |
PraisonAI: AgentOS defaults to network-exposed no-auth mode, allowing unauthenticated agent invocation and instruction disclosure CVE-2026-61426, GHSA-6wjp-v33h-5cvq | High | 0.4% | 11 Jul, 2026 | npm praisonai |
SafeInstall agent guard shell parsing can miss raw package execution GHSA-xrmc-c5cg-rv7x | High | Not scored | 10 Jul, 2026 | npm safeinstall-cli |
9router /v1 APIs has unauthenticated access via reverse proxy locality collapse CVE-2026-56675, GHSA-x5c9-v98j-722r | High | 0.5% | 10 Jul, 2026 | npm 9router |
9router: Unauthenticated `/v1` proxy access via `Host`-header spoofing → open AI relay + SSRF CVE-2026-55641, GHSA-86m2-fcxq-5q7c | High | 0.3% | 10 Jul, 2026 | npm 9router |
9router: Unauthenticated LLM proxy access via /codex rewrite authorization bypass CVE-2026-55638, GHSA-8gmq-j984-vp4r | High | 6.6% | 10 Jul, 2026 | npm 9router |
adm-zip: Crafted ZIP file triggers 4GB memory allocation CVE-2026-39244, GHSA-xcpc-8h2w-3j85 | High | 0.8% | 10 Jul, 2026 | npm adm-zip |
9router: Image prefetch DNS rebinding allows SSRF to internal services CVE-2026-56676, GHSA-cmhj-wh2f-9cgx | High | 0.2% | 10 Jul, 2026 | npm 9router |
@arikusi/deepseek-mcp-server has an Authorization Bypass Through User-Controlled Key CVE-2026-55604, GHSA-fh3r-g96v-f578 | High | 0.4% | 09 Jul, 2026 | npm @arikusi/deepseek-mcp-server |
@Mockoon/commons-server: Unauthenticated admin API + wildcard CORS allows mock-state hijack and secret theft CVE-2026-59148, GHSA-rqx4-3f6q-3x2v | High | 0.3% | 09 Jul, 2026 | npm @mockoon/cli npm @mockoon/commons-server |
n8n: Shared Credential Header Leak via HTTP Request Pagination Expression CVE-2026-59209, GHSA-q3j5-8vrg-4p9q | High | 0.4% | 09 Jul, 2026 | npm n8n |
n8n: Cross-Issuer Token Exchange Account Binding via Subject-Only Identity Resolution CVE-2026-59208, GHSA-mq3m-f8x3-579w | High | 0.3% | 09 Jul, 2026 | npm n8n |
n8n: "Allowed HTTP Request Domains" Restriction Bypass via AI Agents MCP Connector CVE-2026-59207, GHSA-h44j-f5r5-ph73 | High | 0.4% | 09 Jul, 2026 | npm n8n |
n8n: Prototype Pollution via Workflow Credentials Leads to Unauthenticated User and Project Enumeration CVE-2026-59206, GHSA-75qm-gp28-rcq9 | High | 0.7% | 09 Jul, 2026 | npm n8n |
Cline: Cross-Origin WebSocket Hijacking in Cline Hub Dashboard (`/browser` endpoint) CVE-2026-59723, GHSA-3cj3-hqcr-g934 | High | 0.2% | 08 Jul, 2026 | npm cline |
elysia has Inefficient Algorithmic Complexity and Interpretation Conflict CVE-2026-56669, GHSA-9643-4qgh-g8mx | High | 0.6% | 08 Jul, 2026 | npm elysia |
Plate: Media embed provider metadata can bypass URL sanitization and execute iframe JavaScript CVE-2026-55596, GHSA-qj6x-xx2h-8hvv | High | 0.3% | 08 Jul, 2026 | npm @platejs/media |
libp2p: CPU DoS via oversized IHAVE and IWANT control message arrays CVE-2026-49866, GHSA-cwc9-cp4j-mcvv | High | 0.6% | 08 Jul, 2026 | npm @libp2p/gossipsub |
LiquidJS: `pop` filter bypasses `memoryLimit` accounting that its array-filter siblings enforce CVE-2026-55575, GHSA-g357-x5c3-c72p | High | 0.5% | 08 Jul, 2026 | npm liquidjs |
OpenTelemetry JavaScript: Denial of service in `JaegerPropagator` via unhandled exception on a malformed header CVE-2026-59892, GHSA-45rx-2jwx-cxfr | High | 0.6% | 08 Jul, 2026 | npm @opentelemetry/propagator-jaeger |
linkify-it: Quadratic-complexity DoS via the `mailto:` validator scan-loop on attacker text CVE-2026-59887, GHSA-v245-v573-v5vm | High | 0.6% | 08 Jul, 2026 | npm linkify-it |
Immutable.js `List` 32-bit trie overflow → unrecoverable DoS CVE-2026-59879, GHSA-v56q-mh7h-f735 | High | 0.6% | 08 Jul, 2026 | npm immutable |
Astro: Authorization Bypass via Decode Iteration Limit and Rewrite Path Canonicalization Mismatch CVE-2026-59731, GHSA-vj59-8hwv-xxmv | High | 0.3% | 08 Jul, 2026 | npm astro |