Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
OpenClaw's Gateway Control UI bootstrap config required Gateway auth CVE-2026-44994, GHSA-93rg-2xm5-2p9v | Medium | 0.3% | 04 May, 2026 | npm openclaw |
OpenClaw: Workspace dotenv files cannot override connector endpoint hosts CVE-2026-45003, GHSA-55cf-xx38-4p9p | Medium | 0.1% | 04 May, 2026 | npm openclaw |
OpenClaw's ACP child sessions inherit subagent security envelope constraints CVE-2026-44997, GHSA-q3jj-46pq-826r | Medium | 0.2% | 04 May, 2026 | npm openclaw |
OpenClaw validates Zalo outbound photo URLs through the SSRF guard CVE-2026-44116, GHSA-2hh7-c75g-qj2r | Medium | 0.3% | 04 May, 2026 | npm openclaw |
sublinear-time-solver has a Path Traversal Issue CVE-2026-7645, GHSA-gc2j-wpjv-jhrw | Medium | 0.5% | 02 May, 2026 | npm sublinear-time-solver |
@diplodoc/search-extension allows stored XSS via Markdown file title CVE-2026-40201, GHSA-rjmp-rwj4-mv82 | Medium | 0.2% | 01 May, 2026 | npm @diplodoc/search-extension |
mcp-server-semgrep has a Command Injection issue CVE-2026-7446, GHSA-86hp-qxqp-w9wv | Medium | 1.5% | 30 Apr, 2026 | npm mcp-server-semgrep |
Claude SDK for TypeScript has Insecure Default File Permissions in Local Filesystem Memory Tool CVE-2026-41686, GHSA-p7fg-763f-g4gf | Medium | 0.1% | 29 Apr, 2026 | npm @anthropic-ai/sdk |
OpenClaw: Webchat audio embedding could read local files without local-root containment CVE-2026-44996, GHSA-gfg9-5357-hv4c | Medium | 0.3% | 29 Apr, 2026 | npm openclaw |
OpenClaw: Owner-enforced commands could accept wildcard channel senders as command owners CVE-2026-44991, GHSA-c28g-vh7m-fm7v | Medium | 0.2% | 29 Apr, 2026 | npm openclaw |
n8n has Public API Variables IDOR that Allows Cross-Project Secret Disclosure CVE-2026-42227, GHSA-756q-gq9h-fp22 | Medium | 0.2% | 29 Apr, 2026 | npm n8n |
n8n Vulnerable to Hijacking of Unauthenticated Chat Execution CVE-2026-42228, GHSA-f77h-j2v7-g6mw | Medium | 0.4% | 29 Apr, 2026 | npm n8n |
n8n has SQL Injection in SeaTable Node CVE-2026-42229, GHSA-mp4j-h6gh-f6mp | Medium | 0.3% | 29 Apr, 2026 | npm n8n |
n8n has Open Redirect in MCP OAuth Consent Flow CVE-2026-42230, GHSA-f6x8-65q6-j9m9 | Medium | 0.2% | 29 Apr, 2026 | npm n8n |
n8n has SQL Injection in Oracle Database Node via Limit Field CVE-2026-42233, GHSA-r6jc-mpqw-m755 | Medium | 0.3% | 29 Apr, 2026 | npm n8n |
n8n has SQL Injection in Snowflake and MySQL Nodes CVE-2026-42237, GHSA-hp3c-vfpm-q4f7 | Medium | 0.3% | 29 Apr, 2026 | npm n8n |
BigSweetPotatoStudio HyperChat has a Server-Side Request Forgery issue CVE-2026-7223, GHSA-r2jq-4h3x-rfj6 | Medium | 0.3% | 28 Apr, 2026 | npm @dadigua/hyperchat |
OpenClaw: Agent gateway config mutations could change protected operator settings CVE-2026-45001, GHSA-7jm2-g593-4qrc | Medium | 0.2% | 25 Apr, 2026 | npm openclaw |
OpenClaw: Bundled MCP/LSP tools could bypass configured tool policy CVE-2026-44998, GHSA-qrp5-gfw2-gxv4 | Medium | 0.7% | 25 Apr, 2026 | npm openclaw |
OpenClaw: Workspace dotenv MiniMax host override could redirect credentialed requests CVE-2026-44992, GHSA-h2vw-ph2c-jvwf | Medium | 0.1% | 25 Apr, 2026 | npm openclaw |
OpenClaw: QQBot direct media upload skipped URL SSRF validation CVE-2026-44117, GHSA-c4qg-j8jg-42q5 | Medium | 0.2% | 25 Apr, 2026 | npm openclaw |
OpenClaw: MCP stdio server env could load dangerous startup variables from workspace config CVE-2026-44995, GHSA-mj59-h3q9-ghfh | Medium | 0.1% | 25 Apr, 2026 | npm openclaw |
OpenClaw: Isolated cron awareness events were recorded as trusted system events CVE-2026-44999, GHSA-57r2-h2wj-g887 | Medium | 0.2% | 25 Apr, 2026 | npm openclaw |
OpenClaw: Feishu card actions could misclassify DMs and skip dmPolicy CVE-2026-44993, GHSA-72q8-jcmc-97wx | Medium | 0.3% | 25 Apr, 2026 | npm openclaw |
OpenClaw: Hook mapping templates could bypass hook session-key opt-in CVE-2026-45002, GHSA-2xcp-x87w-q377 | Medium | 0.3% | 25 Apr, 2026 | npm openclaw |
n8n-MCP: Sensitive MCP tool-call arguments logged on authenticated requests in HTTP mode CVE-2026-42282, GHSA-wg4g-395p-mqv3 | Medium | 0.3% | 25 Apr, 2026 | npm n8n-mcp |
Excalidraw vulnerable to XSS via Mermaid sequence diagram labels (KaTeX rendering) GHSA-39h7-pwv7-rc3x | Medium | Not scored | 24 Apr, 2026 | npm @excalidraw/excalidraw npm @excalidraw/mermaid-to-excalidraw |
Axios: XSRF Token Cross-Origin Leakage via Prototype Pollution Gadget in `withXSRFToken` Boolean Coercion CVE-2026-42042, GHSA-xx6v-rp6x-q39c | Medium | 0.2% | 24 Apr, 2026 | npm axios |
Axios: Authentication Bypass via Prototype Pollution Gadget in `validateStatus` Merge Strategy CVE-2026-42041, GHSA-w9j2-pvgh-6h63 | Medium | 0.7% | 24 Apr, 2026 | npm axios |
Axios: unbounded recursion in toFormData causes DoS via deeply nested request data CVE-2026-42039, GHSA-62hf-57xw-28j9 | Medium | 0.8% | 24 Apr, 2026 | npm axios |
Axios: CRLF Injection in multipart/form-data body via unsanitized blob.type in formDataToStream CVE-2026-42037, GHSA-445q-vr5w-6q77 | Medium | 0.3% | 24 Apr, 2026 | npm axios |
Axios: HTTP adapter streamed responses bypass maxContentLength CVE-2026-42036, GHSA-vf2m-468p-8v99 | Medium | 0.3% | 24 Apr, 2026 | npm axios |
Axios' HTTP adapter-streamed uploads bypass maxBodyLength when maxRedirects: 0 CVE-2026-42034, GHSA-5c9x-8gcm-mpgx | Medium | 0.3% | 24 Apr, 2026 | npm axios |
RedwoodSDK has Same-site CSRF through lack of origin validation in its server actions CVE-2026-42190, GHSA-m2m6-cff5-3w7c | Medium | 0.1% | 24 Apr, 2026 | npm rwsdk |
PostCSS has XSS via Unescaped </style> in its CSS Stringify Output CVE-2026-41305, GHSA-qx2v-qp2m-jg93 | Medium | 0.2% | 24 Apr, 2026 | npm postcss |
OpenClaw: Paired-device pairing actions were not limited to the caller device CVE-2026-41909, GHSA-xrq9-jm7v-g9h7 | Medium | 0.2% | 23 Apr, 2026 | npm openclaw |
Astro: Cache Poisoning due to incorrect error handling when if-match header is malformed CVE-2026-41322, GHSA-c57f-mm3j-27q9 | Medium | 0.3% | 23 Apr, 2026 | npm @astrojs/node |
n8n-MCP Logs Sensitive Request Data on Unauthorized /mcp Requests CVE-2026-41495, GHSA-pfm2-2mhg-8wpx | Medium | 0.3% | 23 Apr, 2026 | npm n8n-mcp |
Evolver has Prototype Pollution via `Object.assign()` in its mailbox store operations CVE-2026-42077, GHSA-2cjr-5v3h-v2w4 | Medium | 0.2% | 22 Apr, 2026 | npm @evomap/evolver |
i18next-locize-backend has URL Injection via Unsanitized Path Parameters CVE-2026-41885, GHSA-mgcp-mfp8-3q45 | Medium | 0.2% | 22 Apr, 2026 | npm i18next-locize-backend |
fast-xml-parser XMLBuilder: XML Comment and CDATA Injection via Unescaped Delimiters CVE-2026-41650, GHSA-gh4j-gqv2-49f6 | Medium | 0.2% | 22 Apr, 2026 | npm fast-xml-parser |
Marko: XSS via case-insensitive script/style closing tag bypass in runtime HTML escaping CVE-2026-41591, GHSA-x9fj-57fh-c8wq | Medium | 0.2% | 22 Apr, 2026 | npm @marko/runtime-tags npm marko |
i18nextify has DOM XSS via javascript:/data: URL schemes in translated href/src attributes CVE-2026-41692, GHSA-6457-mxpq-4fqq | Medium | 0.1% | 22 Apr, 2026 | npm i18nextify |
DOMPurify: FORBID_TAGS bypassed by function-based ADD_TAGS predicate (asymmetry with FORBID_ATTR fix) CVE-2026-41240, GHSA-h7mw-gpvr-xq4m | Medium | 0.3% | 22 Apr, 2026 | npm dompurify |
DOMPurify has a SAFE_FOR_TEMPLATES bypass in RETURN_DOM mode CVE-2026-41239, GHSA-crv5-9vww-q3g8 | Medium | 0.2% | 22 Apr, 2026 | npm dompurify |
DOMPurify: Prototype Pollution to XSS Bypass via CUSTOM_ELEMENT_HANDLING Fallback CVE-2026-41238, GHSA-v9jr-rg53-9pgp | Medium | 0.3% | 22 Apr, 2026 | npm dompurify |
Astro: XSS in define:vars via incomplete </script> tag sanitization CVE-2026-41067, GHSA-j687-52p2-xcff | Medium | 0.2% | 21 Apr, 2026 | npm astro |
Deep Merge is Vulnerable to Prototype Pollution Through Lack of Sanitization CVE-2026-6594, GHSA-3jc6-6r48-v6qf | Medium | 0.3% | 20 Apr, 2026 | npm @brikcss/merge |
OpenClaw: QMD memory_get restricts reads to canonical or indexed memory paths CVE-2026-44111, GHSA-f934-5rqf-xx47 | Medium | 0.2% | 17 Apr, 2026 | npm openclaw |
OpenClaw: Webchat media embedding enforces local-root containment for tool-result files CVE-2026-41389, GHSA-mr34-9552-qr95 | Medium | 0.3% | 17 Apr, 2026 | npm openclaw |