Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
fast-jwt accepts unknown `crit` header extensions (RFC 7515 violation) CVE-2026-35042, GHSA-hm7r-c7qw-ghp6 | High | 0.2% | 03 Apr, 2026 | npm fast-jwt |
OpenClaw: Gemini OAuth exposed the PKCE verifier through the OAuth state parameter CVE-2026-34511, GHSA-9jpj-g8vv-j5mf | High | 0.2% | 03 Apr, 2026 | npm openclaw |
Budibase: Path traversal in plugin file upload enables arbitrary directory deletion and file write CVE-2026-35214, GHSA-2wfh-rcwf-wh23 | High | 0.6% | 03 Apr, 2026 | npm @budibase/server |
Budibase: Command Injection in Bash Automation Step CVE-2026-25044, GHSA-gjw9-34gf-rp6m | High | 0.5% | 03 Apr, 2026 | npm @budibase/server |
OpenClaw: macOS Tailnet DNS Spoofing & Credential Exfiltration CVE-2026-41393, GHSA-q9w8-cf67-r238 | High | 0.1% | 03 Apr, 2026 | npm openclaw |
OpenClaw: Node browser proxy `allowProfiles` bypass through persistent profile mutation and runtime profile selection CVE-2026-41353, GHSA-h5hg-h7rr-gpf3 | High | 0.3% | 03 Apr, 2026 | npm openclaw |
OpenClaw: Paired node escalates to gateway RCE via unrestricted node.event agent dispatch CVE-2026-41378, GHSA-gjm7-hw8f-73rq | High | 0.4% | 03 Apr, 2026 | npm openclaw |
OpenClaw: Host exec environment sanitization misses package, registry, Docker, compiler, and TLS override variables CVE-2026-41369, GHSA-cg7q-fg22-4g98 | High | 0.3% | 03 Apr, 2026 | npm openclaw |
OpenClaw: Path traversal via inbound channel attachment path in ACP dispatch allows arbitrary file read CVE-2026-41370, GHSA-58q2-7r52-jq62 | High | 0.4% | 03 Apr, 2026 | npm openclaw |
OpenClaw: Incomplete scope-clearing fix allows operator.admin escalation via trusted-proxy auth mode CVE-2026-41404, GHSA-g374-mggx-p6xc | High | 0.3% | 03 Apr, 2026 | npm openclaw |
OpenClaw: Agentic Consent Bypass — LLM Agent Can Silently Disable Exec Approval via `config.patch` CVE-2026-41349, GHSA-v3qc-wrwx-j3pw | High | 0.5% | 03 Apr, 2026 | npm openclaw |
OpenClaw: Image pixel-limit guard can fail open on sips and allow decompression-bomb DoS CVE-2026-41334, GHSA-w85g-3h6x-4xh2 | High | 0.3% | 03 Apr, 2026 | npm openclaw |
OpenClaw: Incomplete host-env-security-policy allows untrusted model to substitute compiler binaries via env overrides CVE-2026-41373, GHSA-g8xp-qx39-9jq9 | High | 0.1% | 03 Apr, 2026 | npm openclaw |
OpenClaw: Device-Paired Node Skips Node Scope Gate → Host RCE.md CVE-2026-41352, GHSA-xj9w-5r6q-x6v4 | High | 0.5% | 03 Apr, 2026 | npm openclaw |
OpenClaw: MS Teams webhook parses body before JWT validation, enabling unauthenticated resource exhaustion CVE-2026-41405, GHSA-p464-m8x6-vhv8 | High | 0.5% | 03 Apr, 2026 | npm openclaw |
OpenClaw: Self-Whitelisting in appendLocalMediaParentRoots Allows Arbitrary File Read & Credential Exfiltration CVE-2026-41366, GHSA-57gh-m6rq-54cf | High | 0.2% | 03 Apr, 2026 | npm openclaw |
OpenClaw: OpenShell Mirror Sync — Sandbox Escape via Unrestricted File Sync + Symlink Traversal CVE-2026-41397, GHSA-cwf8-44x6-32c2 | High | 0.5% | 03 Apr, 2026 | npm openclaw |
OpenClaw: Workspace `.env` can override the bundled plugin trust root CVE-2026-41396, GHSA-qcj9-wwgw-6gm8 | High | 0.1% | 03 Apr, 2026 | npm openclaw |
Electron: Context Isolation bypass via contextBridge VideoFrame transfer CVE-2026-34780, GHSA-jfqg-hf23-qpw2 | High | 0.3% | 03 Apr, 2026 | npm electron |
Electron: AppleScript injection in app.moveToApplicationsFolder on macOS CVE-2026-34779, GHSA-5rqw-r77c-jp79 | High | 0.2% | 03 Apr, 2026 | npm electron |
Electron: Use-after-free in offscreen child window paint callback CVE-2026-34774, GHSA-532v-xpq5-8h95 | High | 0.5% | 03 Apr, 2026 | npm electron |
Electron: Registry key path injection in app.setAsDefaultProtocolClient on Windows CVE-2026-34773, GHSA-mwmh-mq4g-g6gr | High | 0.2% | 03 Apr, 2026 | npm electron |
Electron: Use-after-free in download save dialog callback CVE-2026-34772, GHSA-9w97-2464-8783 | High | 0.2% | 03 Apr, 2026 | npm electron |
Electron: Use-after-free in WebContents fullscreen, pointer-lock, and keyboard-lock permission callbacks CVE-2026-34771, GHSA-8337-3p73-46f4 | High | 0.3% | 03 Apr, 2026 | npm electron |
Electron: Use-after-free in PowerMonitor on Windows and macOS CVE-2026-34770, GHSA-jjp3-mq3x-295m | High | 0.2% | 03 Apr, 2026 | npm electron |
Electron: Renderer command-line switch injection via undocumented commandLineSwitches webPreference CVE-2026-34769, GHSA-9wfr-w7mm-pc7f | High | 0.3% | 03 Apr, 2026 | npm electron |
Electron: Unquoted executable path in app.setLoginItemSettings on Windows CVE-2026-34768, GHSA-jfqx-fxh3-c62j | High | 0.1% | 03 Apr, 2026 | npm electron |
OpenClaw: SSH sandbox tar upload follows symlinks, enabling arbitrary file write on remote host CVE-2026-41364, GHSA-fv94-qvg8-xqpw | High | 0.5% | 02 Apr, 2026 | npm openclaw |
OpenClaw: Workspace `.env` can override the bundled hooks root and load attacker hook code CVE-2026-41336, GHSA-3qpv-xf3v-mm45 | High | 0.1% | 02 Apr, 2026 | npm openclaw |
OpenClaw Nostr privateKey config redaction bypass leaks plaintext signing key via config.get CVE-2026-41385, GHSA-jjw7-3vjf-fg5j | High | 0.2% | 02 Apr, 2026 | npm openclaw |
OpenClaw: PIP_INDEX_URL and UV_INDEX_URL bypass host exec env sanitization and redirect Python package-index traffic CVE-2026-41391, GHSA-7ggg-pvrf-458v | High | 0.1% | 02 Apr, 2026 | npm openclaw |
OpenClaw: Unauthenticated plugin-auth HTTP routes receive operator runtime scopes CVE-2026-41394, GHSA-mhgq-xpfq-6r66 | High | 0.3% | 02 Apr, 2026 | npm openclaw |
mcp-handler has a tool response leak across concurrent client sessions ('Race Condition') GHSA-w2fm-25vw-vh7f | High | Not scored | 01 Apr, 2026 | npm mcp-handler |
NocoBase Has SQL Injection via template variable substitution in workflow SQL node CVE-2026-34825, GHSA-vx58-fwwq-5g8j | High | 0.4% | 01 Apr, 2026 | npm @nocobase/plugin-workflow-sql |
Haraka affected by DoS via `__proto__` email header CVE-2026-34752, GHSA-xph3-r2jf-4vp3 | High | 0.4% | 01 Apr, 2026 | npm Haraka |
dbgate-web: Stored XSS in applicationIcon leads to potential RCE in Electron due to unsafe renderer configuration CVE-2026-34725, GHSA-35xm-qvjg-8m42 | High | 0.2% | 01 Apr, 2026 | npm dbgate-web |
SillyTavern: Path Traversal in `/api/chats/export` and `/api/chats/delete` allows arbitrary file read/delete within user data root CVE-2026-34524, GHSA-vprr-q85p-79mf | High | 0.6% | 01 Apr, 2026 | npm sillytavern |
SillyTavern has a path traversal in `/api/chats/import` allows arbitrary file write outside intended chat directory CVE-2026-34522, GHSA-xvww-xhx6-22pf | High | 0.4% | 01 Apr, 2026 | npm sillytavern |
@payloadcms/next has Stored XSS in Admin Panel CVE-2026-34748, GHSA-mmxc-95ch-2j7c | High | 0.3% | 01 Apr, 2026 | npm @payloadcms/next |
Payload has an SQL Injection via Query Handling CVE-2026-34747, GHSA-7xxh-373w-35vg | High | 0.3% | 01 Apr, 2026 | npm payload |
Payload has Authenticated SSRF via Upload Functionality CVE-2026-34746, GHSA-6r7f-q7f5-wpx8 | High | 0.3% | 01 Apr, 2026 | npm payload |
@tinacms/graphql's `FilesystemBridge` Path Validation Can Be Bypassed via Symlinks or Junctions CVE-2026-34604, GHSA-g9c2-gf25-3x67 | High | 0.4% | 01 Apr, 2026 | npm @tinacms/graphql |
@tinacms/graphql's Media Endpoints Can Escape the Media Root via Symlinks or Junctions CVE-2026-34603, GHSA-g87c-r2jp-293w | High | 0.4% | 01 Apr, 2026 | npm @tinacms/graphql |
xmldom: XML injection via unsafe CDATA serialization allows attacker-controlled markup insertion CVE-2026-34601, GHSA-wh4c-j3r5-mjhp | High | 0.5% | 01 Apr, 2026 | npm @xmldom/xmldom npm xmldom |
OpenClaw gateway exec allow-always over-trusts positional carrier executables CVE-2026-41380, GHSA-p4x4-2r7f-wjxg | High | 0.1% | 01 Apr, 2026 | npm openclaw |
OpenClaw Gateway `operator.write` can reach admin-only session reset via `chat.send` `/reset` CVE-2026-41371, GHSA-5r8f-96gm-5j6g | High | 0.3% | 01 Apr, 2026 | npm openclaw |
OpenClaw has a gateway exec allowlist allow-always bypass via unregistered /usr/bin/script wrapper CVE-2026-41390, GHSA-6pfc-6m7w-m8fx | High | 0.1% | 31 Mar, 2026 | npm openclaw |
OpenClaw's incomplete host env sanitization blocklist allows supply-chain redirection via package-manager env overrides CVE-2026-41387, GHSA-j7p2-qcwm-94v4 | High | 0.2% | 31 Mar, 2026 | npm openclaw |
OpenClaw: Gateway chat.send ACP-only provenance guard could be bypassed by client identity spoofing CVE-2026-41299, GHSA-6xg4-82hv-cp6f | High | 0.2% | 31 Mar, 2026 | npm openclaw |
OpenClaw safeBins jq `$ENV` filter bypass allows environment variable disclosure CVE-2026-41368, GHSA-jccr-rrw2-vc8h | High | 0.2% | 31 Mar, 2026 | npm openclaw |