Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
pnpm binds unscoped user-level npm auth credentials to a repository-selected registry CVE-2026-50017, GHSA-cjhr-43r9-cfmw | Medium | 0.4% | 25 Jun, 2026 | npm pnpm |
pnpm: Tarball hash of GitHub git dependencies is not stored in lockfile CVE-2026-48995, GHSA-hg3w-7f8c-63hp | Medium | 0.2% | 25 Jun, 2026 | npm pnpm |
@anthropic-ai/claude-code has an Insecure Temporary File in /copy Command that Enables Response Disclosure and Symlink-Based File Write CVE-2026-46406, GHSA-4vp2-6q8c-pvq2 | Medium | 0.2% | 25 Jun, 2026 | npm @anthropic-ai/claude-code |
chrome-devtools-mcp: validatePath() does not canonicalize symlinks before enforcing roots CVE-2026-53766, GHSA-8qf9-62x2-82pp | Medium | 0.1% | 24 Jun, 2026 | npm chrome-devtools-mcp |
Ghost Content API filter bypass reveals private fields BIT-ghost-2026-53949, CVE-2026-53949, GHSA-jx35-x7fj-vgpr | Medium | 0.4% | 24 Jun, 2026 | npm ghost |
Ghost: File Upload Content-Type Spoofing BIT-ghost-2026-53948, CVE-2026-53948, GHSA-944x-pm95-3jpr | Medium | 0.2% | 24 Jun, 2026 | npm ghost |
Ghost: Member existence leak via magic link sign-in response BIT-ghost-2026-53947, CVE-2026-53947, GHSA-chgm-3698-jm42 | Medium | 0.3% | 24 Jun, 2026 | npm ghost |
Ghost: Mobiledoc image-size fetch SSRF BIT-ghost-2026-53946, CVE-2026-53946, GHSA-g366-23fw-ggp6 | Medium | 0.2% | 24 Jun, 2026 | npm ghost |
Ghost: Server-side request forgery via DNS rebinding in external request handling BIT-ghost-2026-53945, CVE-2026-53945, GHSA-ch52-px8q-f22j | Medium | 0.2% | 24 Jun, 2026 | npm ghost |
Ghost: Private IP filtering bypass to make server-side requests to internal services BIT-ghost-2026-53944, CVE-2026-53944, GHSA-wvp2-4qqp-4h3r | Medium | 0.3% | 24 Jun, 2026 | npm ghost |
@actual-app/web has CSV Formula Injection in Transaction Export via Imported Payee/Notes Fields CVE-2026-50179, GHSA-xqjm-27pc-rvwm | Medium | 0.3% | 22 Jun, 2026 | npm @actual-app/web |
devbridge-autocomplete has XSS in its default formatters: formatGroup and formatResult fail to escape HTML in untrusted inputs GHSA-hvqh-jw65-wcpq | Medium | Not scored | 22 Jun, 2026 | npm devbridge-autocomplete |
@actual-app/sync-server's missing authorization on GET /secret/:name allows non-admin OpenID users to enumerate admin-configured bank-sync secrets CVE-2026-46700, GHSA-3f62-qv96-4p78 | Medium | 0.3% | 22 Jun, 2026 | npm @actual-app/sync-server |
@actual-app/cli `--format csv` Output Vulnerable to CSV Formula Injection via Custom `escapeCsv` Helper CVE-2026-46672, GHSA-7gh7-258j-4mpq | Medium | 0.2% | 22 Jun, 2026 | npm @actual-app/cli |
Network-AI: EnvironmentManager.restore() backup ID path traversal copies arbitrary directories into environment data CVE-2026-58413, GHSA-48x2-6pr9-2jjf | Medium | 0.2% | 19 Jun, 2026 | npm network-ai |
Network-AI: EnvironmentManager.backup() follows symlinked directories and copies files outside the environment root into backups CVE-2026-58414, GHSA-6x2m-p4xp-wg22 | Medium | 0.2% | 19 Jun, 2026 | npm network-ai |
Network-AI: ApprovalInbox HTTP server has no authentication — anyone can approve pending agent actions CVE-2026-58482, GHSA-mxjx-28vx-xjjj | Medium | 0.2% | 19 Jun, 2026 | npm network-ai |
Network-AI: AgentRuntime sandbox path-prefix checks allow file access outside the configured base directory CVE-2026-58481, GHSA-jvcm-f35g-w78p | Medium | 0.2% | 19 Jun, 2026 | npm network-ai |
MCPVault: PathFilter restricted directories (.git/.obsidian/node_modules) only denied at vault root, not nested CVE-2026-57442, GHSA-9c83-rr99-vfwj | Medium | 0.2% | 19 Jun, 2026 | npm @bitbonsai/mcpvault |
Outerbase Studio: Stored XSS in Text Widget Leads to Authentication Token Exposure CVE-2026-55650, GHSA-wwf9-7jrc-rv4q | Medium | 0.2% | 19 Jun, 2026 | npm @outerbase/studio |
TypeORM: SQL Injection in UpdateQueryBuilder/SoftDeleteQueryBuilder orderBy (MySQL/MariaDB) GHSA-9ggv-8w38-r7pm | Medium | Not scored | 19 Jun, 2026 | npm typeorm |
@microsoft/kiota-http-fetchlibrary: Bearer token and Cookie leak across origin on redirect due to case-mismatched scrub in fetchRequestAdapter CVE-2026-49336, GHSA-396q-4vc8-28x9 | Medium | 0.7% | 19 Jun, 2026 | npm @microsoft/kiota-http-fetchlibrary |
ts-deepmerge: Prototype Method Override leads to DoS CVE-2026-12644, GHSA-87mf-gv2c-c62c | Medium | 0.5% | 19 Jun, 2026 | npm ts-deepmerge |
Signal K Server: Server-Side Request Forgery via Remote Connection Endpoints CVE-2026-55591, GHSA-q59x-jc9f-gfqf | Medium | 0.3% | 18 Jun, 2026 | npm signalk-server |
[Eclipse Theia] Data Exfiltration via Markdown Image Rendering in AI Chat CVE-2026-22551, GHSA-qwjm-9c66-w4q4 | Medium | 0.3% | 18 Jun, 2026 | npm @theia/ai-chat npm @theia/ai-chat-ui npm @theia/ai-claude-code npm @theia/ai-code-completion +3 more |
DOMPurify: Permanent `ALLOWED_ATTR` pollution via `setConfig()` bypassing the hook clone-guard (incomplete fix of the 3.4.7 hook-pollution patch) CVE-2026-65898, GHSA-cmwh-pvxp-8882 | Medium | 0.2% | 18 Jun, 2026 | npm dompurify |
TinaCMS rich-text (slatejson) rendering does not sanitize link/image URLs, allowing stored XSS via dangerous URL schemes CVE-2026-55661, GHSA-2vcc-5v34-9jc8 | Medium | 0.4% | 18 Jun, 2026 | npm @tinacms/mdx npm tinacms |
Hydro: Insufficient session expiration when recreating sessions CVE-2026-55617, GHSA-94jp-7776-qj6q | Medium | 0.5% | 18 Jun, 2026 | npm hydrooj |
http-proxy-middleware `router` host+path substring matching allows Host-header-driven backend routing bypass CVE-2026-55602, GHSA-64mm-vxmg-q3vj | Medium | 0.4% | 18 Jun, 2026 | npm http-proxy-middleware |
jodit: Prototype pollution in Jodit via Jodit.modules.Helpers.set() CVE-2026-55886, GHSA-vpmm-x3fm-qr5c | Medium | 0.5% | 18 Jun, 2026 | npm jodit |
undici vulnerable to HTTP header injection via Set-Cookie percent-decoding CVE-2026-9679, GHSA-p88m-4jfj-68fv | Medium | 0.3% | 17 Jun, 2026 | npm undici |
undici vulnerable to cross-user information disclosure via shared cache whitespace bypass CVE-2026-9678, GHSA-pr7r-676h-xcf6 | Medium | 0.4% | 17 Jun, 2026 | npm undici |
Claude Code: Out-of-Band Data Exfiltration via Pre-Approved HuggingFace Domain in WebFetch CVE-2026-54316, GHSA-fg94-h982-f3mm | Medium | 0.5% | 17 Jun, 2026 | npm @anthropic-ai/claude-code |
NocoDB: Server-Side Request Forgery via Spreadsheet Import Endpoint CVE-2026-53931, GHSA-hmcr-rmjq-47qr | Medium | 0.4% | 17 Jun, 2026 | npm nocodb |
NocoDB: Server-Side Request Forgery via Base Migration URL CVE-2026-53930, GHSA-h6vv-pcq8-7xm4 | Medium | 0.4% | 17 Jun, 2026 | npm nocodb |
NocoDB: Stored Cross-Site Scripting via Secure Attachment CVE-2026-53929, GHSA-6mhr-74x2-98v9 | Medium | 0.4% | 17 Jun, 2026 | npm nocodb |
NocoDB: Refresh Tokens Persist Through Password Recovery CVE-2026-53928, GHSA-r989-7g3j-wjhw | Medium | 0.4% | 17 Jun, 2026 | npm nocodb |
NocoDB: Server-Side Request Forgery via Spreadsheet Fetch URL CVE-2026-53927, GHSA-gprh-27j3-g5h4 | Medium | 0.4% | 17 Jun, 2026 | npm nocodb |
Chrome DevTools for agents: daemon.pid write follows symlinks in /tmp fallback runtime directory CVE-2026-53765, GHSA-3pvj-jv98-qhjq | Medium | 0.1% | 17 Jun, 2026 | npm chrome-devtools-mcp |
n8n: Wrong OAuth Scope on Evaluation Test Runs Endpoints CVE-2026-56775, GHSA-664h-gpgq-h6xx | Medium | 0.3% | 17 Jun, 2026 | npm n8n |
Pi Agent: Pi loads project-local extensions without approval CVE-2026-54325, GHSA-mqxh-6gq7-558m | Medium | 0.2% | 17 Jun, 2026 | npm @earendil-works/pi-coding-agent |
n8n: Denial of Service via ZIP decompression in webhook workflow CVE-2026-54314, GHSA-jqpw-qww5-cj4c | Medium | 0.5% | 16 Jun, 2026 | npm n8n |
n8n: Public API Execution Retry Authorization Bypass CVE-2026-56778, GHSA-h3jj-5f3v-3685 | Medium | 0.3% | 16 Jun, 2026 | npm n8n |
n8n: Python Code Node AST Validator Bypass CVE-2026-56777, GHSA-jwm3-qcfw-c5pp | Medium | 0.3% | 16 Jun, 2026 | npm n8n |
n8n: Reflected XSS via Facebook, WhatsApp, and Microsoft Teams Trigger Webhook Verification Endpoints CVE-2026-54303, GHSA-h86q-fx34-gfjr | Medium | 0.2% | 16 Jun, 2026 | npm n8n |
OpenClaw: Tool group policy callers could accept unvalidated group IDs CVE-2026-53863, GHSA-985f-72mj-8gf7 | Medium | 0.2% | 16 Jun, 2026 | npm openclaw |
OpenClaw: macOS Swift exec allowlist missed combined POSIX inline flags CVE-2026-53861, GHSA-c226-q6fx-6j6c | Medium | 0.2% | 16 Jun, 2026 | npm openclaw |
OpenClaw: Hostname checks could treat trailing-dot hosts inconsistently CVE-2026-53859, GHSA-gxg4-2rrr-jhc7 | Medium | 0.2% | 16 Jun, 2026 | npm openclaw |
OpenClaw: Config recovery could restore openclaw.json with broad file permissions CVE-2026-53856, GHSA-rwp6-7w3q-75fq | Medium | 0.1% | 16 Jun, 2026 | npm openclaw |
OpenClaw: Internal/webchat command auth could inherit ownerAllowFrom wildcard state CVE-2026-53854, GHSA-4hpg-mp64-x7xq | Medium | 0.2% | 16 Jun, 2026 | npm openclaw |