Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
vm2: Default VM can mutate host TypedArray and ArrayBuffer intrinsics after the host-prototype pollution fix CVE-2026-92953, GHSA-3vgf-8m4q-q4qr | Critical | 0.5% | 17 Sep, 2026 | npm vm2 |
vm2 Custom Module Resolver Can Bypass the External Package Allowlist by Loading a Colliding Host Package CVE-2026-92951, GHSA-c48m-32m9-vx93 | Critical | 0.5% | 17 Sep, 2026 | npm vm2 |
vm2 CLI provides no sandbox isolation - host-realm require() is reachable from sandboxed scripts CVE-2026-92950, GHSA-jxxv-8r27-vm4p | Critical | 0.2% | 17 Sep, 2026 | npm vm2 |
vm2: NodeVM builtin allowlist bypass via node:test.run() execArgv allows sandbox escape CVE-2026-92948, GHSA-qhwx-74w5-xhxq | Critical | 0.7% | 17 Sep, 2026 | npm vm2 |
vm2: Sandboxed code can read and write host-realm memory via Node's shared Buffer pool CVE-2026-92947, GHSA-fcqc-726x-5wfc | Critical | 0.5% | 17 Sep, 2026 | npm vm2 |
vm2: NodeVM `require.external` without an explicit `require.root` grants unrestricted host filesystem access and full RCE CVE-2026-92946, GHSA-j3hm-6rg5-mchv | Critical | 0.9% | 17 Sep, 2026 | npm vm2 |
vm2 sandbox escape on Node.js 26 through a stale PromiseThenLookupChain protector CVE-2026-92944, GHSA-27g9-p43v-cw3v | Critical | 0.8% | 17 Sep, 2026 | npm vm2 |
vm2 NodeVM can replace the host process TLS trust store CVE-2026-92941, GHSA-98xx-8mx4-x7cm | Critical | 0.3% | 17 Sep, 2026 | npm vm2 |
vm2 exposes host HTTPS credentials and TLS traffic through globalAgent CVE-2026-92940, GHSA-h85j-hv3c-qfgq | Critical | 0.5% | 17 Sep, 2026 | npm vm2 |
vm2 crypto builtin loads attacker native code through setEngine CVE-2026-92939, GHSA-46pr-c5wc-xffx | Critical | 0.6% | 17 Sep, 2026 | npm vm2 |
vm2 allows a sandboxed plugin to execute native code through `node:sqlite` CVE-2026-92938, GHSA-6w8r-xxw2-g3hx | Critical | 0.6% | 17 Sep, 2026 | npm vm2 |
vm2: GHSA-m283-3h24-438v fix bypass leads to host RCE via call/apply indirection CVE-2026-92937, GHSA-647f-g98j-qq25 | Critical | 1.0% | 17 Sep, 2026 | npm vm2 |
vm2: NodeVM nesting guard accepts array-shaped require and permits host RCE CVE-2026-92935, GHSA-8hr7-r645-pc6w | Critical | 0.7% | 17 Sep, 2026 | npm vm2 |
vm2 sandbox escape to host RCE via revisited host-wrapped AggregateError bypassing Error sanitization cycle short-circuit CVE-2026-92934, GHSA-x965-fc75-jpqh | Critical | 0.8% | 17 Sep, 2026 | npm vm2 |
@zereight/mcp-gitlab: Unauthenticated arbitrary file read via `upload_markdown` enables PAT exfiltration and full account takeover CVE-2026-61560, GHSA-cv3r-c5h8-f4g5 | Critical | 2.9% | 15 Sep, 2026 | npm @zereight/mcp-gitlab |
@zereight/mcp-gitlab Vulnerable to Server-Side Request Forgery CVE-2026-61559, GHSA-2h44-8472-frjj | Critical | 0.4% | 15 Sep, 2026 | npm @zereight/mcp-gitlab |
@zereight/mcp-gitlab: DNS rebinding reaches local Streamable HTTP MCP transport CVE-2026-61568, GHSA-vmp7-252j-cwp7 | Critical | 0.5% | 15 Sep, 2026 | npm @zereight/mcp-gitlab |
proxy-addr vulnerable to IP spoofing via IPv4-mapped IPv6 trust subnet CVE-2026-90711, GHSA-jqcg-44mw-7w3h | Critical | 0.3% | 15 Sep, 2026 | npm proxy-addr |
yayson: Prototype pollution in Store/LegacyStore deserialization CVE-2026-61534, GHSA-325j-mg25-8q58 | Critical | 0.8% | 11 Sep, 2026 | npm yayson |
OmniRoute ACP Custom-Agent Remote Code Execution (RCE) CVE-2026-88062, GHSA-hf57-cqmx-p4gr | Critical | 1.4% | 10 Sep, 2026 | npm omniroute |
Astro: Remote code execution through AVIF image optimization GHSA-26w7-cxv4-gfx2 | Critical | Not scored | 08 Sep, 2026 | npm astro |
Next.js: Unauthenticated Remote Code Execution in Image Optimization API when AVIF files are used GHSA-2xp9-vwfh-vxw4 | Critical | Not scored | 08 Sep, 2026 | npm next |
DeepSeek Harness contains an authentication bypass vulnerability in local HTTP control-plane API CVE-2026-82533, GHSA-8m2g-8cgm-3vcp | Critical | 1.2% | 08 Sep, 2026 | npm @deepseek-ai/dsh-client-connection |
@sap/cds-mtx: Credential disclosure in multitenant applications using SAP Cloud Application Programming Model (CAP) CVE-2026-76969, GHSA-955m-rr6m-2f9v | Critical | 0.4% | 08 Sep, 2026 | npm @sap/cds-mtxs |
undici vulnerable to TLS certificate validation bypass via dropped connect options in BalancedPool CVE-2026-84961, GHSA-w293-vg96-wgc3 | Critical | 0.2% | 04 Sep, 2026 | npm undici |
MapLibre GL JS: XSS Sanitizer Bypass in DOM.sanitize() via Live NamedNodeMap Removal Skip CVE-2026-85061, GHSA-jrc7-96c5-q579 | Critical | 0.5% | 03 Sep, 2026 | npm maplibre-gl |
Next.js: Unauthenticated Remote Code Execution on windows-hosted servers CVE-2026-75604, GHSA-p293-qw3h-jr36 | Critical | 2.1% | 01 Sep, 2026 | npm next |
JSONata vulnerable to Arbitrary Code Execution via crafted JSONata expressions CVE-2026-77415, GHSA-66mm-25pp-rfff | Critical | 0.9% | 21 Aug, 2026 | npm jsonata |
JSONata vulnerable to Arbitrary Code Execution via crafted JSONata expressions CVE-2026-77414, GHSA-2943-5xfg-gq5f | Critical | 0.6% | 21 Aug, 2026 | npm jsonata |
JSONata: Arbitrary Code Execution via crafted JSONata expressions CVE-2026-77413, GHSA-8gq3-vp5j-2grp | Critical | 0.7% | 21 Aug, 2026 | npm jsonata |
Orval: Import-time RCE via schema default -> zod module-level template literal CVE-2026-72717, GHSA-w727-8j6c-2rj4 | Critical | 0.7% | 19 Aug, 2026 | npm orval |
Orval: Import-time RCE via query-parameter default -> zod module-level template literal CVE-2026-72716, GHSA-p4cg-3328-rvfg | Critical | 0.7% | 19 Aug, 2026 | npm orval |
Orval: Import-time RCE via header-parameter default -> zod module-level template literal CVE-2026-71871, GHSA-8j6p-r8jg-mxqh | Critical | 0.7% | 19 Aug, 2026 | npm orval |
Orval: Import-time RCE via array-items default -> zod module-level template literal CVE-2026-71869, GHSA-2h9g-j24r-h63g | Critical | 0.7% | 19 Aug, 2026 | npm orval |
Orval: Import-time RCE via enum-typed default -> zod module-level template literal CVE-2026-71868, GHSA-3575-w9fc-c2j6 | Critical | 0.7% | 19 Aug, 2026 | npm orval |
Orval: RCE via schema property name -> computed-property-key injection in the MSW mock generator CVE-2026-71867, GHSA-2w86-xfrc-g85r | Critical | 0.7% | 19 Aug, 2026 | npm orval |
Orval: Import-time RCE via schema property name -> computed-property-key injection in the zod client CVE-2026-71866, GHSA-6mr6-jvcr-2f25 | Critical | 0.7% | 19 Aug, 2026 | npm orval |
Orval: Import-time RCE via query parameter name -> computed-property-key injection in the zod cli CVE-2026-71865, GHSA-653q-5476-x79g | Critical | 0.7% | 19 Aug, 2026 | npm orval |
Orval: Import-time RCE via header parameter name -> computed-property-key injection in the zod client CVE-2026-71864, GHSA-6437-gxhq-pqv8 | Critical | 0.7% | 19 Aug, 2026 | npm orval |
Orval: RCE via servers[].url -> unescaped request-URL template literal (with getBaseUrlFromSpecification) CVE-2026-62682, GHSA-88f2-fpv8-89q2 | Critical | 0.7% | 19 Aug, 2026 | npm orval |
Orval: RCE via OpenAPI path -> unescaped request-URL template literal (backtick breakout) CVE-2026-62681, GHSA-fg9p-mrxr-hvq7 | Critical | 0.7% | 19 Aug, 2026 | npm orval |
CodeWhale: SSRF bypass - TOCTOU on DNS failure for DNS pinning CVE-2026-75856, GHSA-6v2g-fpxh-pmmh | Critical | 0.5% | 18 Aug, 2026 | crates.io codewhale-tui crates.io deepseek-tui npm codewhale npm deepseek-tui |
vm2: NodeVM `builtin: ['*']` exposes `os` and `dns` — process-wide observability reads AND writes that hijack the host (sibling class of GHSA-9g8x-92q2-p28f) CVE-2026-92960, GHSA-m5w8-4gq2-6f8x | Critical | 0.5% | 17 Aug, 2026 | npm vm2 |
vm2: Sandbox Breakout Using Dangerous Host Proto Mutators CVE-2026-47698, GHSA-cfcw-xp6x-25gj | Critical | 1.0% | 17 Aug, 2026 | npm vm2 |
VM2 has Missing Error.cause Sanitization that Enables Sandbox Escape to RCE CVE-2026-47686, GHSA-m283-3h24-438v | Critical | 0.6% | 17 Aug, 2026 | npm vm2 |
Flowise Prompt Injection to RCE and SSRF via CSV/Airtable Agent Python Validator Bypass CVE-2026-73487, GHSA-w7x8-q2gp-5cgg | Critical | 1.0% | 13 Aug, 2026 | npm flowise npm flowise-components |
Flowise NodeVM sandbox escape via puppeteer allowlist - authenticated RCE and arbitrary file read via Chromium CVE-2026-73483, GHSA-9gvv-qjj3-2p6g | Critical | 0.6% | 13 Aug, 2026 | npm flowise npm flowise-components |
crypto-js: Insufficient Entropy in Cryptographic Secret Generation via Vulnerable CryptoJS Dependency Chain CVE-2026-71851, GHSA-rg76-677x-56q9 | Critical | 0.5% | 07 Aug, 2026 | npm crypto-js |
Unauthenticated Nuxt DevTools RPC allows arbitrary command execution on the developer's host CVE-2026-71319, GHSA-279x-mwfv-vcqv | Critical | 0.6% | 05 Aug, 2026 | npm @nuxt/devtools |
Flowise: Unauthenticated OAuth2 token refresh endpoint returns access tokens — enables token theft for any connected service CVE-2026-70478, GHSA-qgvm-j2hm-6m38 | Critical | 0.6% | 04 Aug, 2026 | npm flowise |