Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
@saltcorn/data: Tenant user role is used for tenant creation role check GHSA-9237-rg5p-rhfw | High | Not scored | 22 Apr, 2026 | npm @saltcorn/data |
Claude Code: Sandbox Escape via Symlink Following Allows Arbitrary File Write Outside Workspace CVE-2026-39861, GHSA-vp62-r36r-9xqp | High | 0.7% | 21 Apr, 2026 | npm @anthropic-ai/claude-code |
Signal K Server has an Unauthenticated Regular Expression Denial of Service (ReDoS) via WebSocket Subscription Paths CVE-2026-39320, GHSA-7gcj-phff-2884 | High | 0.4% | 21 Apr, 2026 | npm signalk-server |
OpenClaude: Sandbox Bypass via Early-Exit Logic Flaw Allows Path Traversal CVE-2026-35570, GHSA-m6rx-7pvw-2f73 | High | 0.2% | 21 Apr, 2026 | npm @gitlawb/openclaude |
OpenClaw: Matrix room control-command authorization no longer trusts DM pairing-store entries CVE-2026-44110, GHSA-2gvc-4f3c-2855 | High | 0.3% | 17 Apr, 2026 | npm openclaw |
OpenClaw: QQBot media tags could read arbitrary local files through reply text CVE-2026-43533, GHSA-66r7-m7xm-v49h | High | 0.4% | 17 Apr, 2026 | npm openclaw |
OpenClaw: busybox and toybox applet execution weakened exec approval binding CVE-2026-43530, GHSA-2cq5-mf3v-mx44 | High | 0.4% | 17 Apr, 2026 | npm openclaw |
OpenClaw: Matrix profile config persistence was reachable from operator.write message tools CVE-2026-42433, GHSA-7jp6-r74r-995q | High | 0.3% | 17 Apr, 2026 | npm openclaw |
OpenClaw: Sandboxed agents could escape exec routing via host=node override CVE-2026-42434, GHSA-736r-jwj6-4w23 | High | 0.3% | 17 Apr, 2026 | npm openclaw |
OpenClaw: Browser interaction routes could pivot into local CDP and regain file reads CVE-2026-43577, GHSA-qmwg-qprg-3j38 | High | 0.3% | 17 Apr, 2026 | npm openclaw |
OpenClaw: Workspace provider auth choices could auto-enable untrusted provider plugins CVE-2026-43569, GHSA-939r-rj45-g2rj | High | 0.4% | 17 Apr, 2026 | npm openclaw |
OpenClaw: Channel setup catalog lookups could include untrusted workspace plugin shadows CVE-2026-43571, GHSA-82qx-6vj7-p8m2 | High | 0.4% | 17 Apr, 2026 | npm openclaw |
OpenClaw: screen_record outPath bypassed workspace-only filesystem guard CVE-2026-43567, GHSA-jf25-7968-h2h5 | High | 0.2% | 17 Apr, 2026 | npm openclaw |
OpenClaw: QQBot reply media URL handling could trigger SSRF and re-upload fetched bytes CVE-2026-43526, GHSA-2767-2q9v-9326 | High | 0.3% | 17 Apr, 2026 | npm openclaw |
OpenClaw: Workspace .env could inject OpenClaw runtime-control variables CVE-2026-43531, GHSA-7wv4-cc7p-jhxc | High | 0.2% | 17 Apr, 2026 | npm openclaw |
OpenClaw: Exec environment denylist missed high-risk interpreter startup variables CVE-2026-43584, GHSA-vfp4-8x56-j7c5 | High | 0.4% | 17 Apr, 2026 | npm openclaw |
OpenClaw: Shell-wrapper detection missed env-argv assignment injection forms CVE-2026-42435, GHSA-j6c7-3h5x-99g9 | High | 0.4% | 17 Apr, 2026 | npm openclaw |
OpenClaw: Memory dreaming config persistence was reachable from operator.write commands CVE-2026-43568, GHSA-5gjc-grvm-m88j | High | 0.2% | 17 Apr, 2026 | npm openclaw |
OpenClaw: Voice-call realtime WebSocket accepted oversized frames CVE-2026-42437, GHSA-vw3h-q6xq-jjm5 | High | 0.4% | 17 Apr, 2026 | npm openclaw |
OpenClaw: config.get redaction bypass through sourceConfig and runtimeConfig aliases CVE-2026-43528, GHSA-8372-7vhw-cm6q | High | 0.3% | 17 Apr, 2026 | npm openclaw |
OpenClaw: Collect-mode queue batches could reuse the last sender authorization context CVE-2026-43535, GHSA-jwrq-8g5x-5fhm | High | 0.2% | 17 Apr, 2026 | npm openclaw |
Flowise: Unauthenticated TTS endpoint accepts arbitrary credential IDs — enables API credit abuse via stored credentials CVE-2026-41279, GHSA-5fw2-mwhh-9947 | High | 0.3% | 17 Apr, 2026 | npm flowise |
Flowise: Public chatflow endpoints return unsanitized flowData including plaintext API keys, passwords, and credential IDs CVE-2026-41278, GHSA-w47f-j8rh-wx87 | High | 0.4% | 17 Apr, 2026 | npm flowise |
Flowise: Mass Assignment in DocumentStore Create Endpoint Leads to Cross-Workspace Object Takeover (IDOR) CVE-2026-41277, GHSA-3prp-9gf7-4rxx | High | 3.1% | 17 Apr, 2026 | npm flowise |
Complete Bypass of CVE-2026-24884 Patch via Git-Delivered Symlink Poisoning in compressing CVE-2026-40931, GHSA-4c3q-x735-j3r5 | High | 0.3% | 17 Apr, 2026 | npm compressing |
Paperclip: codex_local inherited ChatGPT/OpenAI-connected Gmail and was able to send real email GHSA-gqqj-85qm-8qhf | High | Not scored | 16 Apr, 2026 | npm paperclipai |
Paperclip: Unauthenticated Access to Multiple API Endpoints in Authenticated Mode GHSA-xfqj-r5qw-8g4j | High | Not scored | 16 Apr, 2026 | npm @paperclipai/server |
Paperclip: Malicious skills able to exfiltrate and destroy all user data GHSA-w8hx-hqjv-vjcq | High | Not scored | 16 Apr, 2026 | npm @paperclipai/server |
Paperclip: Privilege Escalation via Agent-Controlled workspaceStrategy.provisionCommand Leading to OS Command Execution CVE-2026-41208, GHSA-265w-rf2w-cjh4 | High | 0.6% | 16 Apr, 2026 | npm @paperclipai/server |
OAuth 2.1 Provider: Unprivileged users can register OAuth clients CVE-2026-41427, GHSA-xr8f-h2gw-9xh6 | High | 0.2% | 16 Apr, 2026 | npm @better-auth/oauth-provider |
Unsafe object property setter in mathjs CVE-2026-40897, GHSA-29qv-4j9f-fjw5 | High | 0.6% | 16 Apr, 2026 | npm mathjs |
Angular: SSRF via protocol-relative and backslash URLs in Angular Platform-Server CVE-2026-41423, GHSA-45q2-gjvg-7973 | High | 0.3% | 16 Apr, 2026 | npm @angular/platform-server |
Flowise: resetPassword Authentication Bypass Vulnerability CVE-2026-41276, GHSA-f6hc-c5jr-878p | High | 6.9% | 16 Apr, 2026 | npm flowise |
Flowise: Password Reset Link Sent Over Unsecured HTTP CVE-2026-41275, GHSA-x5w6-38gp-mrqh | High | 0.2% | 16 Apr, 2026 | npm flowise |
Flowise: Unauthenticated OAuth 2.0 Access Token Disclosure via Public Chatflow in Flowise CVE-2026-41273, GHSA-6f7g-v4pp-r667 | High | 0.3% | 16 Apr, 2026 | npm flowise |
Flowise: APIChain Prompt Injection SSRF in GET/POST API Chains CVE-2026-41271, GHSA-6r77-hqx7-7vw8 | High | 0.2% | 16 Apr, 2026 | npm flowise npm flowise-components |
Flowise: SSRF Protection Bypass (TOCTOU & Default Insecure) CVE-2026-41272, GHSA-2x8m-83vc-6wv4 | High | 0.3% | 16 Apr, 2026 | npm flowise npm flowise-components |
Flowise: SSRF Protection Bypass via Unprotected Built-in HTTP Modules in Custom Function Sandbox CVE-2026-41270, GHSA-xhmj-rg95-44hv | High | 0.2% | 16 Apr, 2026 | npm flowise npm flowise-components |
Flowise: File Upload Validation Bypass in createAttachment CVE-2026-41269, GHSA-rh7v-6w34-w2rr | High | 0.5% | 16 Apr, 2026 | npm flowise |
Flowise: Sensitive Data Leak in public-chatbotConfig CVE-2026-41266, GHSA-4jpm-cgx2-8h37 | High | 4.1% | 16 Apr, 2026 | npm flowise |
Flowise: Remote code execution vulnerability in AirtableAgent.ts caused by lack of input verification when using `Pandas`. CVE-2026-41138, GHSA-f228-chmx-v6j6 | High | 0.6% | 16 Apr, 2026 | npm flowise npm flowise-components |
basic-ftp vulnerable to denial of service via unbounded memory consumption in Client.list() CVE-2026-41324, GHSA-rp42-5vxx-qpwr | High | 0.3% | 16 Apr, 2026 | npm basic-ftp |
Flowise: Unauthenticated Information Disclosure of OAuth Secrets (Cleartext) via GET Request CVE-2026-56270, GHSA-6pcv-j4jx-m4vx | High | 2.0% | 16 Apr, 2026 | npm flowise |
PsiTransfer: Upload PATCH path traversal can create `config.<NODE_ENV>.js` and lead to code execution on restart CVE-2026-41180, GHSA-533q-w4g6-5586 | High | 0.4% | 16 Apr, 2026 | npm psitransfer |
MCP-Framework: Unbounded memory allocation in readRequestBody allows denial of service via HTTP transport CVE-2026-39313, GHSA-353c-v8x9-v7c3 | High | 0.5% | 16 Apr, 2026 | npm mcp-framework |
Path traversal in vite-plus/binding downloadPackageManager() writes outside VP_HOME CVE-2026-41211, GHSA-33r3-4whc-44c2 | High | 0.3% | 16 Apr, 2026 | npm vite-plus |
Stored XSS in SEO Fields Leads to Authenticated API Data Exposure in ApostropheCMS CVE-2026-35569, GHSA-855c-r2vq-c292 | High | 0.3% | 15 Apr, 2026 | npm apostrophe |
Novu has a XSS sanitization bypass GHSA-26wg-9xf2-q495 | High | Not scored | 14 Apr, 2026 | npm novu/api |
Novu has SSRF via conditions filter webhook bypasses validateUrlSsrf() protection GHSA-4x48-cgf9-q33f | High | Not scored | 14 Apr, 2026 | npm @novu/api |
MCP Server Kubernetes has an Argument Injection in port_forward tool via space-splitting CVE-2026-39884, GHSA-4xqg-gf5c-ghwq | High | 0.3% | 14 Apr, 2026 | npm mcp-server-kubernetes |