Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
OpenClaw: CDP /json/version WebSocket URL could pivot to untrusted second-hop targets CVE-2026-43576, GHSA-f7fh-qg34-x2xh | Medium | 0.3% | 17 Apr, 2026 | npm openclaw |
OpenClaw: Sender policy bypass in host media attachment reads allows unauthorized local file disclosure CVE-2026-42438, GHSA-jhpv-5j76-m56h | Medium | 0.2% | 17 Apr, 2026 | npm openclaw |
OpenClaw: Browser press/type interaction routes missed complete navigation guard coverage CVE-2026-43580, GHSA-536q-mj95-h29h | Medium | 0.3% | 17 Apr, 2026 | npm openclaw |
OpenClaw: Existing-session browser interaction routes bypassed SSRF policy enforcement CVE-2026-43573, GHSA-527m-976r-jf79 | Medium | 0.3% | 17 Apr, 2026 | npm openclaw |
OpenClaw: Browser tabs action select and close routes bypassed SSRF policy CVE-2026-42439, GHSA-rj2p-j66c-mgqh | Medium | 0.2% | 17 Apr, 2026 | npm openclaw |
OpenClaw: Nostr profile mutation routes allowed operator.write config persistence CVE-2026-43579, GHSA-f3h5-h452-vp3j | Medium | 0.2% | 17 Apr, 2026 | npm openclaw |
OpenClaw: Browser SSRF policy default allowed private-network navigation CVE-2026-43527, GHSA-53vx-pmqw-863c | Medium | 0.3% | 17 Apr, 2026 | npm openclaw |
OpenClaw: Browser SSRF hostname validation could be bypassed by DNS rebinding CVE-2026-43582, GHSA-xq94-r468-qwgj | Medium | 0.2% | 17 Apr, 2026 | npm openclaw |
OpenClaw: Discord event cover images bypassed sandbox media normalization CVE-2026-43532, GHSA-c9h3-5p7r-mrjh | Medium | 0.3% | 17 Apr, 2026 | npm openclaw |
OpenClaw: Empty approver lists could grant explicit approval authorization CVE-2026-43574, GHSA-49cg-279w-m73x | Medium | 0.2% | 17 Apr, 2026 | npm openclaw |
OpenClaw: Microsoft Teams SSO invoke handler missed sender authorization checks CVE-2026-43572, GHSA-gc9r-867r-j85f | Medium | 0.2% | 17 Apr, 2026 | npm openclaw |
OpenClaw: Delivery queue recovery could lose group tool-policy context for media replay CVE-2026-43583, GHSA-r77c-2cmr-7p47 | Medium | 0.2% | 17 Apr, 2026 | npm openclaw |
OpenClaw: Browser snapshot and screenshot routes could expose internal page content after navigation CVE-2026-42436, GHSA-c4qm-58hj-j6pj | Medium | 0.3% | 17 Apr, 2026 | npm openclaw |
Auth0 Next.js SDK has Improper Proxy Cache Lookup CVE-2026-40155, GHSA-xq8m-7c5p-c2r6 | Medium | 0.2% | 17 Apr, 2026 | npm @auth0/nextjs-auth0 |
Claude Code: Insecure System-Wide Configuration Loading Enables Local Privilege Escalation on Windows CVE-2026-35603, GHSA-5cwg-9f6j-9jvx | Medium | 0.1% | 17 Apr, 2026 | npm @anthropic-ai/claude-code |
Saltcorn: Open Redirect in `POST /auth/login` due to incomplete `is_relative_url` validation (backslash bypass) CVE-2026-42259, GHSA-f3g8-9xv5-77gv | Medium | 0.3% | 16 Apr, 2026 | npm @saltcorn/server |
Paperclip: Stored XSS via javascript: URLs in MarkdownBody — urlTransform override disables react-markdown sanitization GHSA-fpw4-p57j-hqmq | Medium | Not scored | 16 Apr, 2026 | npm @paperclipai/ui |
Paperclip: Approval decision attribution spoofing via client-controlled `decidedByUserId` in paperclip server GHSA-p7mm-r948-4q3q | Medium | Not scored | 16 Apr, 2026 | npm @paperclipai/server |
Paperclip: Arbitrary File Read via Agent-Controlled adapterConfig.instructionsFilePath GHSA-3pw3-v88x-xj24 | Medium | Not scored | 16 Apr, 2026 | npm @paperclipai/shared |
Flowise Execute Flow function has an SSRF vulnerability CVE-2026-56275, GHSA-9hrv-gvrv-6gf2 | Medium | 0.3% | 16 Apr, 2026 | npm flowise npm flowise-components |
Flowise: SSRF Protection Bypass via Direct node-fetch / axios Usage (Patch Enforcement Failure) CVE-2026-43995, GHSA-qqvm-66q4-vf5c | Medium | 0.4% | 16 Apr, 2026 | npm flowise npm flowise-components |
Flowise: Path Traversal in Vector Store basePath CVE-2026-56273, GHSA-w6v6-49gh-mc9w | Medium | 0.5% | 16 Apr, 2026 | npm flowise npm flowise-components |
Flowise: Weak Default Token Hash Secret CVE-2026-56269, GHSA-m7mq-85xj-9x33 | Medium | 0.1% | 16 Apr, 2026 | npm flowise |
Mojic: Observable Timing Discrepancy in HMAC Verification CVE-2026-41244, GHSA-wqq3-wfmp-v85g | Medium | 0.1% | 16 Apr, 2026 | npm mojic |
@node-oauth/oauth2-server: PKCE code_verifier ABNF not enforced in token exchange allows brute-force redemption of intercepted authorization codes CVE-2026-41213, GHSA-jhm7-29pj-4xvf | Medium | 0.3% | 16 Apr, 2026 | npm @node-oauth/oauth2-server |
@fastify/static vulnerable to path traversal in directory listing CVE-2026-6410, GHSA-pr96-94w5-mx2h | Medium | 0.5% | 16 Apr, 2026 | npm @fastify/static |
@fastify/static vulnerable to route guard bypass via encoded path separators CVE-2026-6414, GHSA-x428-ghpx-8j92 | Medium | 0.4% | 16 Apr, 2026 | npm @fastify/static |
Renovate affected by remote code execution was possible using the bazel-module or bazelisk managers, when using lockFileMaintenance CVE-2026-76226, GHSA-5vjq-5jmg-39xq | Medium | 0.3% | 16 Apr, 2026 | npm renovate |
LangSmith SDK: Streaming token events bypass output redaction CVE-2026-41182, GHSA-rr7j-v2q5-chgv, PYSEC-2026-2583 | Medium | 0.2% | 16 Apr, 2026 | PyPI langsmith npm langsmith |
hono Improperly Handles JSX Attribute Names Allows HTML Injection in hono/jsx SSR CVE-2026-56761, GHSA-458j-xx4x-4375 | Medium | 0.3% | 16 Apr, 2026 | npm hono |
DOMPurify's ADD_TAGS function form bypasses FORBID_TAGS due to short-circuit evaluation CVE-2026-65903, GHSA-39q2-94rc-95cp | Medium | 0.3% | 16 Apr, 2026 | npm dompurify |
sanitize-html allowedTags Bypass via Entity-Decoded Text in nonTextTags Elements CVE-2026-40186, GHSA-9mrh-v2v3-xpfm | Medium | 0.2% | 15 Apr, 2026 | npm sanitize-html |
ApostropheCMS: Information Disclosure via choices/counts Query Parameters Bypassing publicApiProjection Field Restrictions CVE-2026-39857, GHSA-c276-fj82-f2pq | Medium | 0.4% | 15 Apr, 2026 | npm apostrophe |
ApostropheCMS: Stored XSS via CSS Custom Property Injection in @apostrophecms/color-field Escaping Style Tag Context CVE-2026-33889, GHSA-97v6-998m-fp4g | Medium | 0.2% | 15 Apr, 2026 | npm apostrophe |
ApostropheCMS: publicApiProjection Bypass via project Query Builder in Piece-Type REST API CVE-2026-33888, GHSA-xhq9-58fw-859p | Medium | 0.5% | 15 Apr, 2026 | npm apostrophe |
NocoBase has SSRF in Workflow HTTP Request and Custom Request Plugins CVE-2026-40346, GHSA-mvvv-v22x-xqwp | Medium | 0.4% | 15 Apr, 2026 | npm @nocobase/plugin-workflow-request |
Sync-in Server has Username Enumeration via Timing Attack CVE-2026-41161, GHSA-43fj-qp3h-hrh5 | Medium | 0.3% | 15 Apr, 2026 | npm @sync-in/server |
Mafintosh's protocol-buffers-schema is vulnerable to prototype pollution CVE-2026-5758, GHSA-j452-xhg8-qg39 | Medium | 0.5% | 15 Apr, 2026 | npm protocol-buffers-schema |
@adonisjs/http-server has an Open Redirect vulnerability CVE-2026-40255, GHSA-6qvv-pj99-48qm | Medium | 0.2% | 14 Apr, 2026 | npm @adonisjs/core npm @adonisjs/http-server |
MCPHub has an authentication bypass CVE-2025-13822, GHSA-9vq7-9h42-j88h | Medium | 0.4% | 14 Apr, 2026 | npm @samanhappy/mcphub |
follow-redirects leaks Custom Authentication Headers to Cross-Domain Redirect Targets CVE-2026-40895, GHSA-r4q5-vmmm-2653 | Medium | 0.5% | 14 Apr, 2026 | npm follow-redirects |
next-intl has an open redirect vulnerability CVE-2026-40299, GHSA-8f24-v5vv-gm5j | Medium | 0.3% | 10 Apr, 2026 | npm next-intl |
Axios has Unrestricted Cloud Metadata Exfiltration via Header Injection Chain CVE-2026-40175, GHSA-fvcv-3m26-pcqx | Medium | 1.9% | 10 Apr, 2026 | npm axios |
@sveltejs/kit: Unvalidated redirect in handle hook causes Denial-of-Service CVE-2026-40074, GHSA-3f6h-2hrp-w5wx | Medium | 0.4% | 10 Apr, 2026 | npm @sveltejs/kit |
Zod jsVideoUrlParser vulnerable to ReDoS in util.js CVE-2026-5986, GHSA-8fgx-wgvr-pcx8 | Medium | 0.4% | 09 Apr, 2026 | npm js-video-url-parser |
OpenClaw: GIT_DIR and related git plumbing env vars missing from exec env denylist (GHSA-m866-6qv5-p2fg variant) CVE-2026-41915, GHSA-cm8v-2vh9-cxf3 | Medium | 0.1% | 09 Apr, 2026 | npm openclaw |
Unhead has a hasDangerousProtocol() bypass via leading-zero padded HTML entities in useHeadSafe() CVE-2026-39315, GHSA-95h2-gj7x-gx9w | Medium | 0.3% | 09 Apr, 2026 | npm unhead |
OpenClaw: Multiple Code Paths Missing Base64 Pre-Allocation Size Checks CVE-2026-42420, GHSA-ccx3-fw7q-rr2r | Medium | 0.3% | 09 Apr, 2026 | npm openclaw |
OpenClaw Host-Exec Environment Variable Injection GHSA-w9j9-w4cp-6wgr | Medium | Not scored | 09 Apr, 2026 | npm openclaw |
OpenClaw: Strict browser SSRF bypass in Playwright redirect handling leaves private targets reachable CVE-2026-42430, GHSA-w8g9-x8gx-crmm | Medium | 0.2% | 09 Apr, 2026 | npm openclaw |