Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
link-preview-js vulnerable to IPv6 and internal loopback attacks CVE-2026-43897, GHSA-4gp8-rjrq-ch6q | High | 0.7% | 05 May, 2026 | npm link-preview-js |
exiftool-vendored vulnerable to argument injection via newline characters in tag names CVE-2026-43893, GHSA-cw26-7653-2rp5 | High | 0.5% | 05 May, 2026 | npm exiftool-vendored |
OpenClaw's gateway config mutation guard allowed unsafe model-driven config writes CVE-2026-45006, GHSA-cwj3-vqpp-pmxr | High | 0.5% | 05 May, 2026 | npm openclaw |
OpenClaw vulnerable to arbitrary code execution via attacker-controlled setup-api.js loaded from cwd during env-key resolution CVE-2026-45004, GHSA-r39h-4c2p-3jxp | High | 0.1% | 05 May, 2026 | npm openclaw |
@tdurieux/anonymous_github Vulnerable to XSS via Unsanitized GitHub Repository Content Rendering in Anonymous GitHub Origin GHSA-g485-8j3v-p6x8 | High | Not scored | 05 May, 2026 | npm @tdurieux/anonymous_github |
Inngest TypeScript SDK exposes environment variables via serve() handler on unhandled HTTP methods CVE-2026-42047, GHSA-2jf5-6wwv-vhxx | High | 0.4% | 05 May, 2026 | npm inngest |
Network-AI missing authentication on MCP HTTP endpoint, which allows unauthenticated privileged tool calls CVE-2026-42856, GHSA-fj4g-2p96-q6m3 | High | 0.5% | 05 May, 2026 | npm network-ai |
fast-uri vulnerable to host confusion via percent-encoded authority delimiters CVE-2026-6322, GHSA-v39h-62p7-jpjc | High | 0.5% | 05 May, 2026 | npm fast-uri |
Apache Thrift vulnerable to Path Traversal, HTTP Request/Response Splitting, Uncontrolled Resource Consumption BIT-thrift-2026-43870, CVE-2026-43870, GHSA-526f-jxpj-jmg2 | High | 0.4% | 05 May, 2026 | npm thrift |
OpenClaw: OpenShell FS bridge reads pin and verify the opened file before returning bytes CVE-2026-44113, GHSA-5h3g-6xhh-rg6p | High | 0.2% | 04 May, 2026 | npm openclaw |
OpenClaw: OpenShell FS bridge writes stay pinned to the sandbox mount root CVE-2026-44112, GHSA-wppj-c6mr-83jj | High | 7.3% | 04 May, 2026 | npm openclaw |
Signal K Server's WebSocket Login Endpoint Lacks Rate Limiting (Credential Brute-Force) CVE-2026-41893, GHSA-vmfm-ch9h-5c7g | High | 0.3% | 04 May, 2026 | npm signalk-server |
OpenClaw's exec allowlist analysis rejects shell expansion in unquoted heredocs CVE-2026-44115, GHSA-x3h8-jrgh-p8jx | High | 0.4% | 04 May, 2026 | npm openclaw |
OpenClaw: MCP loopback owner context is derived from server-issued bearer tokens CVE-2026-44118, GHSA-r6xh-pqhr-v4xh | High | 0.1% | 04 May, 2026 | npm openclaw |
@fastify/accepts-serializer Vulnerable to Denial of Service via Unbounded Accept Header Cache Growth CVE-2026-7768, GHSA-qxhc-wx3p-2wmg | High | 0.3% | 04 May, 2026 | npm @fastify/accepts-serializer |
fast-uri vulnerable to path traversal via percent-encoded dot segments CVE-2026-6321, GHSA-q3j6-qgpj-74h6 | High | 0.6% | 04 May, 2026 | npm fast-uri |
Clerk has an authorization bypass when combining organization, billing, or reverification checks CVE-2026-42349, GHSA-w24r-5266-9c3c | High | 0.2% | 30 Apr, 2026 | npm @clerk/astro npm @clerk/backend npm @clerk/chrome-extension npm @clerk/clerk-expo +13 more |
n8n-mcp's IPv4-mapped IPv6 addresses bypass SSRF protection in validateUrlSync(), enabling full SSRF for SDK embedders CVE-2026-42449, GHSA-56c3-vfp2-5qqj | High | 0.2% | 30 Apr, 2026 | npm n8n-mcp |
Jupyter Notebook Vulnerable to Authentication Token Theft via CommandLinker XSS BIT-jupyter-base-notebook-2026-40171, BIT-jupyter-notebook-2026-40171, BIT-jupyterlab-2026-40171, CVE-2026-40171, GHSA-rch3-82jr-f9w9, PYSEC-2026-2538, PYSEC-2026-2682 | High | 0.5% | 30 Apr, 2026 | PyPI jupyterlab PyPI notebook npm @jupyter-notebook/help-extension npm @jupyterlab/help-extension |
i18next-http-middleware has path traversal / SSRF via user-controlled language and namespace parameters CVE-2026-42353, GHSA-jfgf-83c5-2c4m | High | 0.4% | 29 Apr, 2026 | npm i18next-http-middleware |
n8n Vulnerable to XSS via MCP OAuth client CVE-2026-42235, GHSA-537j-gqpc-p7fq | High | 0.3% | 29 Apr, 2026 | npm n8n |
n8n's Credential Authorization Bypass in dynamic-node-parameters Allows Foreign API Key Replay CVE-2026-42226, GHSA-r4v6-9fqc-w5jr | High | 0.3% | 29 Apr, 2026 | npm n8n |
n8n has a Python Task Runner Sandbox Escape Vulnerability CVE-2026-42234, GHSA-44v6-jhgm-p3m4 | High | 0.4% | 29 Apr, 2026 | npm n8n |
n8n Vulnerable to Unauthenticated Denial of Service via MCP Client Registration CVE-2026-42236, GHSA-49m9-pgww-9vq6 | High | 0.5% | 29 Apr, 2026 | npm n8n |
CyberChef has a Cross-site Scripting issue CVE-2026-42615, GHSA-h4hv-92pp-pcjg | High | 0.3% | 29 Apr, 2026 | npm cyberchef |
Apache Thrift Node.js bindings vulnerable to Uncontrolled Recursion BIT-thrift-2026-41636, CVE-2026-41636, GHSA-r67j-r569-jrwp | High | 0.5% | 28 Apr, 2026 | npm thrift |
OpenClaw: Workspace dotenv could override runtime-control environment variables CVE-2026-44114, GHSA-hxvm-xjvf-93f3 | High | 0.1% | 25 Apr, 2026 | npm openclaw |
simple-git is vulnerable to Remote Code Execution CVE-2026-6951, GHSA-hffm-xvc3-vprc | High | 0.9% | 25 Apr, 2026 | npm simple-git |
Axios: no_proxy bypass via IP alias allows SSRF CVE-2026-42038, GHSA-m7pr-hjqh-92cm | High | 0.3% | 24 Apr, 2026 | npm axios |
Axios: Header Injection via Prototype Pollution CVE-2026-42035, GHSA-6chq-wfr3-2hj9 | High | 0.4% | 24 Apr, 2026 | npm axios |
Axios: Prototype Pollution Gadgets - Response Tampering, Data Exfiltration, and Request Hijacking CVE-2026-42033, GHSA-pf86-5x62-jrwf | High | 0.9% | 24 Apr, 2026 | npm axios |
Marked Vulnerable to OOM Denial of Service via Infinite Recursion in marked Tokenizer CVE-2026-41680, GHSA-6v9c-7cg6-27q7 | High | 0.3% | 24 Apr, 2026 | npm marked |
Claude Code: Trust Dialog Bypass via Git Worktree Spoofing Allows Arbitrary Code Execution CVE-2026-40068, GHSA-q5hj-mxqh-vv77 | High | 0.3% | 24 Apr, 2026 | npm @anthropic-ai/claude-code |
Budibase auth session cookies are set with httpOnly:false — any XSS can lead to full account takeover CVE-2026-42239, GHSA-4f9j-vr4p-642r | High | 0.3% | 24 Apr, 2026 | npm @budibase/backend-core |
liquidjs has a Denial of Service via circular block reference in layout CVE-2026-41311, GHSA-4rc3-7j7w-m548 | High | 0.4% | 24 Apr, 2026 | npm liquidjs |
Actual has Privilege Escalation via 'change-password' Endpoint on OpenID-Migrated Servers CVE-2026-33318, GHSA-prp4-2f49-fcgp | High | 0.5% | 23 Apr, 2026 | npm @actual-app/sync-server |
Evolver: Path Traversal via `--out` flag in `fetch` command allows Arbitrary File Write CVE-2026-42075, GHSA-r466-rxw4-3j9j | High | 0.6% | 22 Apr, 2026 | npm @evomap/evolver |
uuid: Missing buffer bounds check in v3/v5/v6 when buf is provided CVE-2026-41907, CVE-2026-41988, GHSA-w5hq-g745-h8pq | High | 0.4% | 22 Apr, 2026 | npm uuid |
MCPHub has Path Traversal via Malicious MCPB Manifest Name CVE-2026-79743, GHSA-p3h2-2j4p-p83g | High | 0.5% | 22 Apr, 2026 | npm @samanhappy/mcphub |
locize Client SDK: Cross-origin DOM XSS & Handler Hijack Through Missing e.origin Validation in InContext Editor CVE-2026-41886, GHSA-w937-fg2h-xhq2 | High | 0.1% | 22 Apr, 2026 | npm locize |
i18next-http-middleware: HTTP response splitting and DoS via unsanitised Content-Language header CVE-2026-41683, GHSA-c3h8-g69v-pjrg | High | 0.3% | 22 Apr, 2026 | npm i18next-http-middleware |
xmldom: Uncontrolled recursion in XML serialization leads to DoS CVE-2026-41673, GHSA-2v35-w6hq-6mfw | High | 0.6% | 22 Apr, 2026 | npm @xmldom/xmldom npm xmldom |
xmldom has XML injection through unvalidated DocumentType serialization CVE-2026-41674, GHSA-f6ww-3ggp-fr8h | High | 0.6% | 22 Apr, 2026 | npm @xmldom/xmldom npm xmldom |
xmldom has XML node injection through unvalidated processing instruction serialization CVE-2026-41675, GHSA-x6wf-f3px-wcqx | High | 0.5% | 22 Apr, 2026 | npm @xmldom/xmldom npm xmldom |
xmldom has XML node injection through unvalidated comment serialization CVE-2026-41672, GHSA-j759-j44w-7fr8 | High | 0.5% | 22 Apr, 2026 | npm @xmldom/xmldom npm xmldom |
@nocobase/database has SQL Injection via String Concatenation through Recursive Eager Loading CVE-2026-41640, GHSA-4948-f92q-f432 | High | 1.9% | 22 Apr, 2026 | npm @nocobase/database |
@nocobase/plugin-collection-sql: SQL Validation Bypass Through Missing `checkSQL` Call CVE-2026-41641, GHSA-wrwh-c28m-9jjh | High | 1.8% | 22 Apr, 2026 | npm @nocobase/plugin-collection-sql |
i18next-fs-backend: Path traversal via unsanitised lng/ns allows arbitrary file read/overwrite CVE-2026-41693, GHSA-8847-338w-5hcj | High | 0.3% | 22 Apr, 2026 | npm i18next-fs-backend |
i18next-http-middleware: Prototype pollution and path traversal via user-controlled language and namespace parameters CVE-2026-41690, GHSA-5fgg-jcpf-8jjw | High | 0.3% | 22 Apr, 2026 | npm i18next-http-middleware |
engram: HTTP server CORS wildcard + auth-off-by-default enables CSRF graph exfiltration and persistent indirect prompt injection GHSA-2r2p-4cgf-hv7h | High | Not scored | 22 Apr, 2026 | npm engramx |