Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
n8n: MCP Browser HTTP Transport Exposes Unauthenticated Browser-Control Sessions CVE-2026-54309, GHSA-qrx8-25qr-5r7v | High | 0.5% | 16 Jun, 2026 | npm n8n |
n8n: Cross-Tenant Credential Takeover via Dynamic Credentials EE Endpoints CVE-2026-54305, GHSA-2j5h-858j-5mpf | High | 0.4% | 16 Jun, 2026 | npm n8n |
n8n: Credential Exfiltration via Permission Bypass CVE-2026-54307, GHSA-pmqw-72cg-wx85 | High | 0.4% | 16 Jun, 2026 | npm n8n |
n8n: Denial of Service via ZIP decompression in webhook workflow CVE-2026-54314, GHSA-jqpw-qww5-cj4c | Medium | 0.5% | 16 Jun, 2026 | npm n8n |
n8n: Public API Execution Retry Authorization Bypass CVE-2026-56778, GHSA-h3jj-5f3v-3685 | Medium | 0.3% | 16 Jun, 2026 | npm n8n |
n8n: Python Code Node AST Validator Bypass CVE-2026-56777, GHSA-jwm3-qcfw-c5pp | Medium | 0.3% | 16 Jun, 2026 | npm n8n |
n8n: Stored XSS in Chat Trigger Node CVE-2026-54302, GHSA-42h7-m79w-wvg5 | High | 0.2% | 16 Jun, 2026 | npm n8n |
n8n: Reflected XSS via Facebook, WhatsApp, and Microsoft Teams Trigger Webhook Verification Endpoints CVE-2026-54303, GHSA-h86q-fx34-gfjr | Medium | 0.2% | 16 Jun, 2026 | npm n8n |
n8n: Microsoft SQL Node Prototype Pollution CVE-2026-54312, GHSA-x6p3-m6h9-fx7r | High | 0.4% | 16 Jun, 2026 | npm n8n |
Malicious release: Malicious code in backoffice-charges-module (npm) GHSA-mmhq-hrgp-xjhx, MAL-2026-5929 | Malicious | Not scored | 16 Jun, 2026 | npm backoffice-charges-module |
Malicious release: Malicious code in bubblestr (npm) GHSA-9p79-38q4-f6wc, MAL-2026-5930 | Malicious | Not scored | 16 Jun, 2026 | npm bubblestr |
Malicious release: Malicious code in tw-theme-kit (npm) GHSA-g2wq-vjqj-xc3h, MAL-2026-5935 | Malicious | Not scored | 16 Jun, 2026 | npm tw-theme-kit |
Malicious release: Malicious code in vite-config-field (npm) GHSA-w8vm-43w2-4xqf, MAL-2026-5936 | Malicious | Not scored | 16 Jun, 2026 | npm vite-config-field |
Malicious release: Malicious code in react-vite-assert (npm) MAL-2026-5933 | Malicious | Not scored | 16 Jun, 2026 | npm react-vite-assert |
Malicious release: Malicious code in ssr-auth-sync (npm) GHSA-5xwj-q4j9-v44q, MAL-2026-5934 | Malicious | Not scored | 16 Jun, 2026 | npm ssr-auth-sync |
Malicious release: Malicious code in package-uploader (npm) GHSA-q8q6-p47p-ppp3, MAL-2026-5932 | Malicious | Not scored | 16 Jun, 2026 | npm package-uploader |
Malicious release: Malicious code in mci-sdk (npm) GHSA-7cjh-m5vf-hp3r, MAL-2026-5931 | Malicious | Not scored | 16 Jun, 2026 | npm mci-sdk |
Malicious release: Malicious code in chai-test-mocks (npm) MAL-2026-5928 | Malicious | Not scored | 16 Jun, 2026 | npm chai-test-mocks |
Malicious release: Malicious code in aillmgen (npm) GHSA-cqfc-w7g9-4c7p, MAL-2026-5927 | Malicious | Not scored | 16 Jun, 2026 | npm aillmgen |
LobeHub: Unauthenticated SSRF in `/webapi/proxy` CVE-2026-54157, GHSA-xmwj-c75x-6346 | Critical | 1.8% | 16 Jun, 2026 | npm @lobehub/lobehub |
Malicious release: Malicious code in @kalipto/local (npm) GHSA-653g-2cfx-6gpc, MAL-2026-5922 | Malicious | Not scored | 16 Jun, 2026 | npm @kalipto/local |
Malicious release: Malicious code in test-copppss (npm) MAL-2026-5926 | Malicious | Not scored | 16 Jun, 2026 | npm test-copppss |
Malicious release: Malicious code in @welcome-onboarding-web/mobile-focus-account-beta-merging (npm) MAL-2026-5923 | Malicious | Not scored | 16 Jun, 2026 | npm @welcome-onboarding-web/mobile-focus-account-beta-merging |
Malicious release: Malicious code in binproto (npm) MAL-2026-5924 | Malicious | Not scored | 16 Jun, 2026 | npm binproto |
Malicious release: Malicious code in motion-lib (npm) GHSA-4qw9-xmhp-hc7v, MAL-2026-5925 | Malicious | Not scored | 16 Jun, 2026 | npm motion-lib |
Malicious release: Malicious code in js-digest (npm) MAL-2026-5912 | Malicious | Not scored | 16 Jun, 2026 | npm js-digest |
Malicious release: Malicious code in pretie_x2 (npm) GHSA-wqxw-wj7c-pv2x, MAL-2026-5920 | Malicious | Not scored | 16 Jun, 2026 | npm pretie_x2 |
Malicious release: Malicious code in pretie_x1 (npm) GHSA-m9g3-3j2m-gf65, MAL-2026-5919 | Malicious | Not scored | 16 Jun, 2026 | npm pretie_x1 |
Malicious release: Malicious code in nottuff7 (npm) GHSA-f4m6-gffx-m3mq, MAL-2026-5918 | Malicious | Not scored | 16 Jun, 2026 | npm nottuff7 |
Malicious release: Malicious code in nottuff23 (npm) GHSA-w6gq-6584-67xq, MAL-2026-5915 | Malicious | Not scored | 16 Jun, 2026 | npm nottuff23 |
Malicious release: Malicious code in nottuff25 (npm) GHSA-2gj2-9868-32pf, MAL-2026-5916 | Malicious | Not scored | 16 Jun, 2026 | npm nottuff25 |
Malicious release: Malicious code in nottuff4 (npm) GHSA-r54f-vpj7-r35g, MAL-2026-5917 | Malicious | Not scored | 16 Jun, 2026 | npm nottuff4 |
Malicious release: Malicious code in nottuff15 (npm) GHSA-pvm5-2r8w-jpqq, MAL-2026-5914 | Malicious | Not scored | 16 Jun, 2026 | npm nottuff15 |
OpenClaw: Shell inline-command parsing could miss an allowlist check CVE-2026-53866, GHSA-f397-5vjw-v2c2 | High | 0.3% | 16 Jun, 2026 | npm openclaw |
OpenClaw: Workspace-derived service PATH could influence trash command selection CVE-2026-53865, GHSA-rx78-29qr-5hq8 | High | 0.1% | 16 Jun, 2026 | npm openclaw |
OpenClaw: Host environment sanitizer missed two Node.js control variables CVE-2026-53864, GHSA-ccwh-wwpp-6wg5 | High | 0.2% | 16 Jun, 2026 | npm openclaw |
OpenClaw: Tool group policy callers could accept unvalidated group IDs CVE-2026-53863, GHSA-985f-72mj-8gf7 | Medium | 0.2% | 16 Jun, 2026 | npm openclaw |
OpenClaw: Bootstrap token replay could widen pending pairing scopes CVE-2026-53862, GHSA-9v8j-9c9g-w66c | Low | 0.1% | 16 Jun, 2026 | npm openclaw |
OpenClaw: macOS Swift exec allowlist missed combined POSIX inline flags CVE-2026-53861, GHSA-c226-q6fx-6j6c | Medium | 0.2% | 16 Jun, 2026 | npm openclaw |
OpenClaw: BlueBubbles sender policy could match mutable conversation identifiers CVE-2026-53860, GHSA-8j37-5w68-wj2g | Low | 0.2% | 16 Jun, 2026 | npm openclaw |
OpenClaw: Hostname checks could treat trailing-dot hosts inconsistently CVE-2026-53859, GHSA-gxg4-2rrr-jhc7 | Medium | 0.2% | 16 Jun, 2026 | npm openclaw |
OpenClaw: Workspace .env STATE_DIRECTORY could influence bundled runtime dependency roots CVE-2026-53858, GHSA-wc84-j36w-pw4x | High | 0.1% | 16 Jun, 2026 | npm openclaw |
OpenClaw: Zalo allowFrom could bind to mutable display names CVE-2026-53857, GHSA-8c59-hr4w-qg69 | High | 0.2% | 16 Jun, 2026 | npm openclaw |
OpenClaw: Config recovery could restore openclaw.json with broad file permissions CVE-2026-53856, GHSA-rwp6-7w3q-75fq | Medium | 0.1% | 16 Jun, 2026 | npm openclaw |
OpenClaw: Shell positional parameters could weaken strict inline-eval checks CVE-2026-53855, GHSA-5cj2-3jr2-5h77 | High | 0.3% | 16 Jun, 2026 | npm openclaw |
OpenClaw: Internal/webchat command auth could inherit ownerAllowFrom wildcard state CVE-2026-53854, GHSA-4hpg-mp64-x7xq | Medium | 0.2% | 16 Jun, 2026 | npm openclaw |
OpenClaw: Linux and macOS exec allowlists skipped configured argument patterns CVE-2026-53853, GHSA-v2ww-5rh7-2h5v | High | 0.3% | 16 Jun, 2026 | npm openclaw |
OpenClaw: Empty-scope device re-pairing could confuse caller scope containment CVE-2026-53852, GHSA-8mg9-j9cf-54cj | Low | 0.2% | 16 Jun, 2026 | npm openclaw |
OpenClaw: Slack reaction events could ignore reaction notification settings CVE-2026-53851, GHSA-fcvx-5cxc-v5p8 | Medium | 0.2% | 16 Jun, 2026 | npm openclaw |
OpenClaw: Focus command could miss controlScope enforcement CVE-2026-53850, GHSA-mpc8-jxjh-qpgh | Medium | 0.1% | 16 Jun, 2026 | npm openclaw |