Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Claude SDK for TypeScript: Memory Tool Path Validation Allows Sandbox Escape to Sibling Directories CVE-2026-34451, GHSA-5474-4w2j-mq4c | Medium | 0.4% | 31 Mar, 2026 | npm @anthropic-ai/sdk |
Nuxt OG Image is vulnerable to reflected XSS via query parameter injection into HTML attributes CVE-2026-34405, GHSA-mg36-wvcr-m75h | Medium | 0.2% | 31 Mar, 2026 | npm nuxt-og-image |
Nuxt OG Image is vulnerable to Denial of Service via unbounded image dimensions CVE-2026-34404, GHSA-c7xp-q6q8-hg76 | Medium | 0.3% | 31 Mar, 2026 | npm nuxt-og-image |
lodash vulnerable to Prototype Pollution via array path bypass in `_.unset` and `_.omit` CVE-2026-2950, GHSA-f23m-r3pf-42rh | Medium | 0.3% | 31 Mar, 2026 | npm lodash npm lodash-amd npm lodash-es npm lodash.unset |
Parse Server has a LiveQuery protected-field guard bypass via array-like logical operator value BIT-parse-2026-34595, CVE-2026-34595, GHSA-mmg8-87c5-jrc2 | Medium | 0.3% | 31 Mar, 2026 | npm parse-server |
Parse Server has a session field immutability bypass via falsy-value guard BIT-parse-2026-34574, CVE-2026-34574, GHSA-f6j3-w9v3-cq22 | Medium | 0.2% | 31 Mar, 2026 | npm parse-server |
OpenClaw affected by SSRF via unguarded image download in fal provider CVE-2026-34504, GHSA-qxgf-hmcj-3xw3 | Medium | 0.2% | 31 Mar, 2026 | npm openclaw |
OpenClaw's Nextcloud Talk webhook missing rate limiting on shared secret authentication CVE-2026-33580, GHSA-9528-x887-j2fp | Medium | 0.4% | 31 Mar, 2026 | npm openclaw |
OpenClaw: Google Chat and Zalouser group sender allowlist bypass via policy downgrade CVE-2026-33578, GHSA-63mg-xp9j-jfcm | Medium | 0.3% | 31 Mar, 2026 | npm openclaw |
OpenClaw: Zalo channel downloads media before sender authorization CVE-2026-33576, GHSA-v2v2-f783-358j | Medium | 0.4% | 31 Mar, 2026 | npm openclaw |
OpenClaw: Non-owner command-authorized sender can change the owner-only `/send` session delivery policy CVE-2026-35620, GHSA-39mp-545q-w789 | Medium | 0.4% | 30 Mar, 2026 | npm openclaw |
OpenClaw: Mutating internal `/allowlist` chat commands missed `operator.admin` scope enforcement GHSA-vqvg-86cc-cg83 | Medium | Not scored | 30 Mar, 2026 | npm openclaw |
OpenClaw has a Gateway HTTP /v1/models Route Bypasses Operator Read Scope CVE-2026-35619, GHSA-68f8-9mhj-h2mp | Medium | 0.3% | 30 Mar, 2026 | npm openclaw |
OpenClaw has incomplete Fix for CVE-2026-32011: Feishu Webhook Pre-Auth Body Parsing DoS (Slow-Body / Slowloris Variant) CVE-2026-35665, GHSA-w6m8-cqvj-pg5v | Medium | 0.3% | 30 Mar, 2026 | npm openclaw |
OpenClaw has incomplete Fix for CVE-2026-27486: Unvalidated SIGKILL in `!stop` Chat Command via `shell-utils.ts` CVE-2026-35667, GHSA-3298-56p6-rpw2 | Medium | 0.1% | 30 Mar, 2026 | npm openclaw |
GraphQL API endpoint ignores CORS origin restriction BIT-parse-2026-34373, CVE-2026-34373, GHSA-q3p6-g7c4-829c | Medium | 0.2% | 30 Mar, 2026 | npm parse-server |
OpenClaw has ACP CLI approval prompt ANSI escape sequence injection CVE-2026-35651, GHSA-4hmj-39m8-jwc7 | Medium | 0.3% | 29 Mar, 2026 | npm openclaw |
OpenClaw: Telegram DM-Scoped Inline Button Callbacks Bypass DM Pairing and Mutate Session State CVE-2026-35661, GHSA-j4c9-w69r-cw33 | Medium | 0.3% | 29 Mar, 2026 | npm openclaw |
OpenClaw: Synology Chat Webhook Pre-Auth Rate-Limit Bypass Enables Brute-Force Guessing of Webhook Token CVE-2026-35646, GHSA-mf5g-6r6f-ghhm | Medium | 0.2% | 29 Mar, 2026 | npm openclaw |
OpenClaw: MS Teams Feedback Invocation Bypasses Sender Allowlists and Records Unauthorized Session Feedback CVE-2026-35654, GHSA-rf6h-5gpw-qrgq | Medium | 0.2% | 29 Mar, 2026 | npm openclaw |
OpenClaw: Gateway Plugin Subagent Fallback `deleteSession` Uses Synthetic `operator.admin` CVE-2026-35645, GHSA-h4jx-hjr3-fhgc | Medium | 0.3% | 29 Mar, 2026 | npm openclaw |
OpenClaw: Feishu Raw Card Send Surface Can Mint Legacy Card Callbacks That Bypass DM Pairing CVE-2026-35664, GHSA-77w2-crqv-cmv3 | Medium | 0.3% | 29 Mar, 2026 | npm openclaw |
OpenClaw: Feishu webhook reads and parses unauthenticated request bodies before signature validation CVE-2026-35640, GHSA-3h52-cx59-c456 | Medium | 0.4% | 29 Mar, 2026 | npm openclaw |
OpenCC has an Out-of-bounds read when processing truncated UTF-8 input GHSA-7fqq-q52p-2jjg | Medium | Not scored | 29 Mar, 2026 | PyPI OpenCC PyPI opencc npm opencc |
Handlebars.js has a Prototype Method Access Control Gap via Missing __lookupSetter__ Blocklist Entry GHSA-7rx3-28cr-v5wh | Medium | Not scored | 29 Mar, 2026 | npm handlebars |
mppx has Stripe charge credential replay via missing idempotency check CVE-2026-34210, GHSA-8mhj-rffc-rcvw | Medium | 0.5% | 29 Mar, 2026 | npm mppx |
OpenClaw: Telegram Webhook Missing Guess Rate Limiting Enables Brute-Force Guessing of Weak Webhook Secret CVE-2026-35628, GHSA-vcx4-4qxg-mfp4 | Medium | 0.3% | 27 Mar, 2026 | npm openclaw |
OpenClaw: BlueBubbles Group Reactions Bypass requireMention and Still Enqueue Agent-Visible System Events CVE-2026-35642, GHSA-mw7w-g3mg-xqm7 | Medium | 0.2% | 27 Mar, 2026 | npm openclaw |
OpenClaw: Matrix Verification Notices Bypass Matrix DM Policy and Reply to Unpaired DM Peers CVE-2026-35647, GHSA-9wqx-g2cw-vc7r | Medium | 0.3% | 27 Mar, 2026 | npm openclaw |
OpenClaw: BlueBubbles Webhook Missing Rate Limiting Enables Brute-Force Password Guessing CVE-2026-35623, GHSA-xq8g-hgh6-87hv | Medium | 0.4% | 27 Mar, 2026 | npm openclaw |
DOMPurify is vulnerable to mutation-XSS via Re-Contextualization CVE-2026-65914, GHSA-h8r8-wccr-v5f2 | Medium | 0.3% | 27 Mar, 2026 | npm dompurify |
n8n has XSS in its Credential Management Flow CVE-2026-56359, GHSA-364x-8g5j-x2pr | Medium | 0.2% | 27 Mar, 2026 | npm n8n |
n8n has XSS in Chat Trigger Node through Custom CSS CVE-2026-56356, GHSA-3c7f-5hgj-h279 | Medium | 0.3% | 27 Mar, 2026 | npm n8n |
n8n: Authenticated XSS and Open Redirect via Form Node CVE-2026-56354, GHSA-w673-8fjw-457c | Medium | 0.2% | 27 Mar, 2026 | npm n8n |
n8n has a Stored XSS Vulnerability in its Form Trigger CVE-2026-56358, GHSA-q4fm-pjq6-m63g | Medium | 0.2% | 27 Mar, 2026 | npm n8n |
Locutus Prototype Pollution due to incomplete fix for CVE-2026-25521 CVE-2026-33994, GHSA-vc8f-x9pp-wf5p | Medium | 0.6% | 27 Mar, 2026 | npm locutus |
Locutus has Prototype Pollution via __proto__ Key Injection in unserialize() CVE-2026-33993, GHSA-4mph-v827-f877 | Medium | 0.6% | 27 Mar, 2026 | npm locutus |
Handlebars.js has Prototype Pollution Leading to XSS through Partial Template Injection CVE-2026-33916, GHSA-2qvq-rjwj-gvw9 | Medium | 0.3% | 26 Mar, 2026 | npm handlebars |
Apollo Server: Browser bug allows for bypass of XS-Search (read-only Cross-Site Request Forgery) prevention GHSA-9q82-xgwf-vj6h | Medium | Not scored | 26 Mar, 2026 | npm @apollo/server npm apollo-server-core |
OpenClaw: Symlink Traversal via IDENTITY.md appendFile in agents.create/update (Incomplete Fix for CVE-2026-32013) CVE-2026-35632, GHSA-7xr2-q9vf-x4r5 | Medium | 0.3% | 26 Mar, 2026 | npm openclaw |
OpenClaw: Image Tool `tools.fs.workspaceOnly` Bypass via Sandbox Bridge Mounts CVE-2026-35658, GHSA-cfp9-w5v9-3q4h | Medium | 0.3% | 26 Mar, 2026 | npm openclaw |
OpenClaw's Conflicting Tool Identity Hints Bypass Dangerous-Tool Prompting CVE-2026-35655, GHSA-74wf-h43j-vvmj | Medium | 0.2% | 26 Mar, 2026 | npm openclaw |
OpenClaw Bypasses DM Policy Separation via Synology Chat Webhook Path Collision CVE-2026-35635, GHSA-rqp8-q22p-5j9q | Medium | 0.2% | 26 Mar, 2026 | npm openclaw |
OpenClaw leaf subagents can bypass controlScope restrictions to send messages to child sessions CVE-2026-35662, GHSA-x2cm-hg9c-mf5w | Medium | 0.2% | 26 Mar, 2026 | npm openclaw |
OpenClaw: Forwarding header spoofing bypasses gateway.trustedProxies origin detection CVE-2026-35656, GHSA-844j-xrrq-wgh4 | Medium | 0.3% | 26 Mar, 2026 | npm openclaw |
OpenClaw: Google Chat app-url webhook auth accepted non-deployment add-on principals CVE-2026-35622, GHSA-mp66-rf4f-mhh8 | Medium | 0.3% | 26 Mar, 2026 | npm openclaw |
OpenClaw: Tlon settings empty-allowlist reconciliation bypassed intended revocation CVE-2026-35649, GHSA-pw7h-9g6p-c378 | Medium | 0.3% | 26 Mar, 2026 | npm openclaw |
OpenClaw: Tlon cite expansion happens before channel and DM authorization is complete CVE-2026-35637, GHSA-vfg3-pqpq-93m4 | Medium | 0.2% | 26 Mar, 2026 | npm openclaw |
OpenClaw: Mattermost callback dispatch allowed non-allowlisted sender actions CVE-2026-35652, GHSA-8883-9w57-vwv6 | Medium | 0.4% | 26 Mar, 2026 | npm openclaw |
OpenClaw is vulnerable to unauthenticated resource exhaustion through its voice call webhook handling CVE-2026-35626, GHSA-rm59-992w-x2mv | Medium | 0.5% | 26 Mar, 2026 | npm openclaw |