Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
DOMPurify XSS via selectedcontent re-clone CVE-2026-47423, GHSA-87xg-pxx2-7hvx | High | 0.4% | 01 Jun, 2026 | npm dompurify |
@agenticmail/mcp Missing Authentication for Critical Function CVE-2026-50287, GHSA-63gr-g7jc-v8rg | High | 0.4% | 01 Jun, 2026 | npm @agenticmail/mcp |
AgenticMail API/storage and outbound relay hardening fixes CVE-2026-47255, GHSA-wjjv-3mj2-39hf | High | 0.3% | 29 May, 2026 | npm @agenticmail/api npm @agenticmail/core |
NodeVM network builtin exclusions bypass via internal _http_client and _http_server CVE-2026-47139, GHSA-r9pm-gxmw-wv6p | High | 0.4% | 29 May, 2026 | npm vm2 |
vm2's Bridge Proxy set trap ignores receiver parameter, enabling host object property injection via prototype chain CVE-2026-47209, GHSA-c4cf-2hgv-2qv6 | High | 0.3% | 29 May, 2026 | npm vm2 |
vm2 has a sandbox escape via unblocked cross-realm Symbol.for keys + missing bridge write-trap symbol checks CVE-2026-47135, GHSA-m5q2-4fm3-vfqp | High | 0.3% | 29 May, 2026 | npm vm2 |
OpenClaw: Scoped chat.send route inheritance could bypass admin command scope gates CVE-2026-35674, GHSA-hw9r-h9mr-4jff | High | 0.3% | 29 May, 2026 | npm openclaw |
OpenClaw: QQBot native approval buttons did not enforce configured approver identity CVE-2026-35630, GHSA-mgq6-vr84-7m2j | High | 0.2% | 29 May, 2026 | npm openclaw |
OpenClaw: Non-owner chat senders could issue device-pairing bootstrap codes CVE-2026-32905, GHSA-xr4f-mjxj-w6w5 | High | 0.2% | 29 May, 2026 | npm openclaw |
axios Vulnerable to Credential Theft and Response Hijacking via Prototype Pollution Gadget in Config Merge CVE-2026-44495, GHSA-3g43-6gmg-66jw | High | 0.9% | 29 May, 2026 | npm axios |
axios Vulnerable to Full Man-in-the-Middle via Prototype Pollution Gadget in `config.proxy` CVE-2026-44494, GHSA-35jp-ww65-95wh | High | 1.1% | 29 May, 2026 | npm axios |
axios's shouldBypassProxy does not recognize IPv4-mapped IPv6 addresses, allowing NO_PROXY bypass (incomplete fix for CVE-2025-62718) CVE-2026-44492, GHSA-pjwm-pj3p-43mv | High | 12.3% | 29 May, 2026 | npm axios |
axios has DoS & Header Injection via Prototype Pollution Read-Side Gadgets in axios merge functions CVE-2026-44490, GHSA-898c-q2cr-xwhg | High | 0.3% | 29 May, 2026 | npm axios |
HaxCMS has a stored Cross-Site Scripting (XSS) bypass in its saveNode endpoint CVE-2026-48527, GHSA-g2g8-95qg-v35h | High | 0.2% | 29 May, 2026 | npm @haxtheweb/haxcms-nodejs |
TinyMCE Cross-Site Scripting (XSS) vulnerability through `mce:protected` comments CVE-2026-47762, GHSA-v98h-vmpc-fpqv | High | 0.3% | 28 May, 2026 | NuGet TinyMCE Packagist tinymce/tinymce npm tinymce |
TinyMCE Cross-Site Scripting (XSS) vulnerability using media plugin `data-mce-object` injection CVE-2026-47761, GHSA-vg35-5wq7-3x7w | High | 0.3% | 28 May, 2026 | NuGet TinyMCE Packagist tinymce/tinymce npm tinymce |
TinyMCE Cross-Site Scripting (XSS) vulnerability using sanitization bypass through nested SVGs CVE-2026-47760, GHSA-mh5m-5hw4-5c69 | High | 0.2% | 28 May, 2026 | NuGet TinyMCE Packagist tinymce/tinymce npm tinymce |
TinyMCE Cross-Site Scripting (XSS) vulnerability using through data-mce- prefixed src, href, style attributes CVE-2026-47759, GHSA-q742-qvgc-gc2f | High | 0.3% | 28 May, 2026 | NuGet TinyMCE Packagist tinymce/tinymce npm tinymce |
FUXA's Unauthenticated Project Data Disclosure Exposes Server-Side Scripts and Device Configurations CVE-2026-47717, GHSA-q3w6-q3hc-c5x6 | High | 1.4% | 27 May, 2026 | npm fuxa-server |
Budibase: SSRF via OAuth2 token endpoint URL reaches internal hosts and cloud metadata CVE-2026-48153, GHSA-4q6h-8p4v-67vq | High | 0.2% | 27 May, 2026 | npm @budibase/server |
Budibase: Basic app users can exfiltrate stored REST datasource auth by rewriting datasource base URL CVE-2026-48152, GHSA-3gp5-q4jw-3v94 | High | 0.3% | 27 May, 2026 | npm @budibase/server |
Budibase: Webhook schema endpoint authorization bypass allows unauthenticated mutation of webhook and automation schema CVE-2026-48151, GHSA-qhv3-wjg8-6fx6 | High | 0.2% | 27 May, 2026 | npm @budibase/server |
Budibase: SSRF via OAuth2 Config Validation — Missing fetchWithBlacklist Protection CVE-2026-48146, GHSA-g6qx-g4pr-92v7 | High | 0.2% | 27 May, 2026 | npm @budibase/server |
LiquidJS Vulnerable to ReDoS via Quadratic Backtracking in `strip_html` Filter Regex CVE-2026-45617, GHSA-r7g9-xpmj-5fcq | High | 0.5% | 27 May, 2026 | npm liquidjs |
LiquidJS has a memory and render limit bypass via unbounded width padding in `date` filter (strftime) CVE-2026-45357, GHSA-hh27-hf48-9f5q | High | 0.4% | 27 May, 2026 | npm liquidjs |
@hapi/content header parser has a parameter smuggling issue that allows upload-filter bypass via duplicate parameters CVE-2026-44974, GHSA-36hh-x5p5-jgc8 | High | 0.5% | 27 May, 2026 | npm @hapi/content |
tmp has Path Traversal via unsanitized prefix/postfix that enables directory escape CVE-2026-44705, GHSA-ph9p-34f9-6g65 | High | 0.4% | 27 May, 2026 | npm tmp |
FUXA Vulnerable to Unauthenticated Remote Code Execution via Script Test Mode Authorization Bypass CVE-2026-43947, GHSA-rg3m-cfq7-g6h6 | High | 0.9% | 26 May, 2026 | npm fuxa-server |
FUXA has an unauthenticated arbitrary tag value disclosure via /api/getTagValue CVE-2026-43946, GHSA-fwcm-rqvw-j3p7 | High | 0.6% | 26 May, 2026 | npm fuxa-server |
FUXA Vulnerable to Pre-auth RCE via Path Manipulation & Configuration Injection CVE-2026-43945, GHSA-p69w-mmfv-xrfj | High | 0.8% | 26 May, 2026 | npm @frangoteam/fuxa |
Fedify has an LD-Signature Bypass via JSON-LD Named-Graph Restructuring CVE-2026-42462, GHSA-9rfg-v8g9-9367 | High | 0.2% | 26 May, 2026 | npm @fedify/fedify |
yeoman-environment Vulnerable to Arbitrary Package Installation without User Confirmation CVE-2026-42089, GHSA-vv9j-gjw2-j8wp | High | 0.2% | 26 May, 2026 | npm yeoman-environment |
pacote is vulnerable to Denial of Service (DoS) via the addGitSha function CVE-2026-9496, GHSA-w4pp-8pjf-rmxw | High | 0.3% | 26 May, 2026 | npm pacote |
Parse Server: Pre-authentication denial of service via client version header regex backtracking BIT-parse-2026-47138, CVE-2026-47138, GHSA-38m6-82c8-4xfm | High | 0.6% | 23 May, 2026 | npm parse-server |
Typebot has Stored XSS via Rating Block Custom Icon that Bypasses isUnsafe Sandbox in Builder Preview CVE-2026-28445, GHSA-6m7c-xfhp-p9fh | High | 0.3% | 22 May, 2026 | npm @typebot.io/js |
Network-AI: Unauthenticated Cross-Origin MCP Tool Invocation via Empty Default Secret CVE-2026-46701, GHSA-j3vx-cx2r-pvg8 | High | 0.2% | 21 May, 2026 | npm network-ai |
@nevware21/ts-utils: Prototype Pollution in objDeepCopy/objCopyProps via for...in without hasOwnProperty CVE-2026-46681, GHSA-x7j8-49r8-mr43 | High | 0.4% | 21 May, 2026 | npm @nevware21/ts-utils |
js-libp2p: Memory DoS via subscription flood of unique topics CVE-2026-46679, GHSA-4f8r-922h-2vgv | High | 0.3% | 21 May, 2026 | npm @libp2p/gossipsub |
JavaScript Cookie: Per-instance prototype hijack in assign() enables cookie-attribute injection CVE-2026-46625, GHSA-qjx8-664m-686j | High | 0.9% | 21 May, 2026 | npm js-cookie |
@hulumi/policies: HULUMI-H1 SecureBucket parent spoof bypass CVE-2026-82861, GHSA-g43v-9x7q-83pq | High | 0.4% | 21 May, 2026 | npm @hulumi/policies |
@hulumi/baseline: CloudTrail selector tampering events were not fully detected CVE-2026-82863, GHSA-gfp8-mp24-5vxg | High | 0.2% | 21 May, 2026 | npm @hulumi/baseline |
MCP Server Kubernetes: Tool Access Control Bypass via Presentation-Layer Filtering Without Execution-Layer Enforcement CVE-2026-46519, GHSA-cr22-wjx7-2w6m | High | 0.5% | 21 May, 2026 | npm mcp-server-kubernetes |
md-fileserver: Stored/Reflected XSS when viewing Markdown (raw HTML allowed) CVE-2026-46492, GHSA-32q2-hhr5-6qvv | High | 0.2% | 21 May, 2026 | npm md-fileserver |
samlify: XML Injection in AttributeValue Allows Privilege Escalation in Signed SAML Assertions CVE-2026-46490, GHSA-34r5-q4jw-r36m | High | 0.5% | 21 May, 2026 | npm samlify |
@angular/platform-server: SSRF via Hostname Hijacking CVE-2026-46417, GHSA-rfh7-fxqc-q52v | High | 0.4% | 19 May, 2026 | npm @angular/platform-server |
CamoFox MCP: Unauthenticated HTTP MCP browser-control surface GHSA-7hgr-7h44-33w2 | High | Not scored | 19 May, 2026 | npm camofox-mcp |
SillyTavern: SSRF in SearXNG Search Proxy via Unvalidated baseUrl CVE-2026-46372, GHSA-qg89-qwwh-5f3j | High | 0.9% | 19 May, 2026 | npm sillytavern |
@libp2p/kad-dht: Unvalidated PUT_VALUE records allow unbounded disk exhaustion on DHT server nodes CVE-2026-45783, GHSA-32mq-hpph-xfvr | High | 0.4% | 19 May, 2026 | npm @libp2p/kad-dht |
PenPot MCP REPL server binds to 0.0.0.0 with unauthenticated /execute endpoint — RCE CVE-2026-45805, GHSA-22qr-rp27-j9wm | High | 0.4% | 19 May, 2026 | npm @penpot/mcp |
Budibase: Unrestricted Upload of File with Dangerous Type CVE-2026-46426, GHSA-82rc-gxrg-v4gf | High | 0.2% | 19 May, 2026 | npm budibase |