Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
OpenClaw: Gateway WebSocket Denial of Service via unbounded pre-auth upgrades CVE-2026-41399, GHSA-f44p-c7w9-7xr7 | High | 0.3% | 31 Mar, 2026 | npm openclaw |
OpenClaw: Discord text `/approve` bypasses `channels.discord.execApprovals.approvers` and allows non-approvers to resolve pending exec approvals CVE-2026-41303, GHSA-98hh-7ghg-x6rq | High | 0.4% | 31 Mar, 2026 | npm openclaw |
OpenClaw: CLI Remote Onboarding Persists Unauthenticated Discovery Endpoint and Exfiltrates Gateway Credentials CVE-2026-41342, GHSA-3cw3-5vxw-g2h3 | High | 0.1% | 31 Mar, 2026 | npm openclaw |
OpenClaw: Voice-call Plivo V3 webhook replay key uses unsorted URL, allowing replay via query-parameter reordering CVE-2026-41395, GHSA-8689-gm9g-jgr6 | High | 0.1% | 31 Mar, 2026 | npm openclaw |
Parser Server's streaming file download bypasses afterFind file trigger authorization BIT-parse-2026-34784, CVE-2026-34784, GHSA-hpm8-9qx6-jvwv | High | 0.4% | 31 Mar, 2026 | npm parse-server |
parse-server has GraphQL complexity validator exponential fragment traversal DoS BIT-parse-2026-34573, CVE-2026-34573, GHSA-mfj6-6p54-m98c | High | 0.6% | 31 Mar, 2026 | npm parse-server |
OpenClaw's device removal and token revocation do not terminate active WebSocket sessions CVE-2026-34503, GHSA-2pr2-hcv6-7gwv | High | 0.3% | 31 Mar, 2026 | npm openclaw |
OpenClaw's message tool media parameter bypasses tool policy filesystem isolation CVE-2026-33581, GHSA-v8wv-jg3q-qwpq | High | 0.6% | 31 Mar, 2026 | npm openclaw |
OpenClaw: node.pair.approve missing callerScopes validation allows low-privilege operator to approve malicious nodes CVE-2026-33577, GHSA-2x4x-cc5g-qmmg | High | 0.4% | 31 Mar, 2026 | npm openclaw |
OpenClaw: `browser.request` still allows `POST /reset-profile` through the `operator.write` surface CVE-2026-35653, GHSA-xp9r-prpg-373r | High | 0.6% | 30 Mar, 2026 | npm openclaw |
OpenClaw: Gateway operator.write Can Reach Admin-Class Channel Allowlist Persistence via chat.send CVE-2026-35621, GHSA-94pw-c6m8-p9p9 | High | 0.3% | 30 Mar, 2026 | npm openclaw |
OpenClaw has an Arbitrary Malicious Code Execution Vulnerability CVE-2026-35641, GHSA-m3mh-3mpg-37hw | High | 0.1% | 30 Mar, 2026 | npm openclaw |
OpenClaw has Sandbox Media Root Bypass via Unnormalized `mediaUrl` / `fileUrl` Parameter Keys (CWE-22) CVE-2026-35668, GHSA-hr5v-j9h9-xjhg | High | 0.4% | 30 Mar, 2026 | npm openclaw |
LiveQuery protected field leak via shared mutable state across concurrent subscribers BIT-parse-2026-34363, CVE-2026-34363, GHSA-m983-v2ff-wq65 | High | 0.4% | 30 Mar, 2026 | npm parse-server |
@tinacms/graphql has Path Traversal that leads to overwrite of arbitrary files CVE-2026-33949, GHSA-v9p7-gf3q-h779 | High | 0.4% | 30 Mar, 2026 | npm @tinacms/graphql |
OpenClaw: SSRF via Unguarded Configured Base URLs in Multiple Channel Extensions (Incomplete Fix for CVE-2026-28476) CVE-2026-35629, GHSA-rhfg-j8jq-7v2h | High | 0.2% | 29 Mar, 2026 | npm openclaw |
OpenClaw: `session_status` sessionId resolution bypasses sandboxed session-tree visibility CVE-2026-35636, GHSA-q2qc-744p-66r2 | High | 0.3% | 29 Mar, 2026 | npm openclaw |
OpenClaw: Gateway HTTP Session History Route Bypasses Operator Read Scope CVE-2026-35657, GHSA-5jvj-hxmh-6h6j | High | 0.2% | 29 Mar, 2026 | npm openclaw |
MikroORM has Prototype Pollution in Utils.merge CVE-2026-34221, GHSA-qpfv-44f3-qqx6 | High | 0.4% | 29 Mar, 2026 | npm @mikro-orm/core |
Parse Server exposes auth data via verify password endpoint BIT-parse-2026-34215, CVE-2026-34215, GHSA-wp76-gg32-8258 | High | 0.3% | 29 Mar, 2026 | npm parse-server |
mppx: Tempo has a session close voucher bypass vulnerability due to settled amount equality CVE-2026-34209, GHSA-mv9j-8jvg-j8mr | High | 0.4% | 29 Mar, 2026 | npm mppx |
OpenClaw: Gateway Plugin HTTP Auth Grants Unrestricted operator.admin Runtime Scope to All Callers CVE-2026-35669, GHSA-qm2m-28pf-hgjw | High | 0.3% | 27 Mar, 2026 | npm openclaw |
OpenClaw: Gateway HTTP /sessions/:sessionKey/kill Reaches Admin Kill Path Without Caller Scope Binding CVE-2026-34512, GHSA-9p93-7j67-5pc2 | High | 0.3% | 27 Mar, 2026 | npm openclaw |
Happy DOM's fetch credentials include uses page-origin cookies instead of target-origin cookies CVE-2026-34226, GHSA-w4gp-fjgq-3q4g | High | 0.5% | 27 Mar, 2026 | npm happy-dom |
Clerk: SSRF in the opt-in clerkFrontendApiProxy feature may leak secret keys to unintended host CVE-2026-34076, GHSA-gjxx-92w9-8v8f | High | 0.3% | 27 Mar, 2026 | npm @clerk/backend npm @clerk/express npm @clerk/fastify npm @clerk/hono |
@mobilenext/mobile-mcp alllows arbitrary file write via Path Traversal in mobile screen capture tools CVE-2026-33989, GHSA-3p2m-h2v6-g9mx | High | 0.5% | 27 Mar, 2026 | npm @mobilenext/mobile-mcp |
Handlebars.js has JavaScript Injection in CLI Precompiler via Unescaped Names and Options CVE-2026-33941, GHSA-xjpj-3mr7-gcpf | High | 0.3% | 27 Mar, 2026 | npm handlebars |
Handlebars.js has JavaScript Injection via AST Type Confusion when passing an object as dynamic partial CVE-2026-33940, GHSA-xhpv-hc6g-r9c6 | High | 0.7% | 27 Mar, 2026 | npm handlebars |
Handlebars.js has Denial of Service via Malformed Decorator Syntax in Template Compilation CVE-2026-33939, GHSA-9cx6-37pm-9jff | High | 0.6% | 27 Mar, 2026 | npm handlebars |
Handlebars.js has JavaScript Injection via AST Type Confusion by tampering @partial-block CVE-2026-33938, GHSA-3mfm-83xf-c92r | High | 0.7% | 27 Mar, 2026 | npm handlebars |
Serialize JavaScript has CPU Exhaustion Denial of Service via crafted array-like objects CVE-2026-34043, GHSA-qj8w-gfj5-8c6v | High | 0.5% | 27 Mar, 2026 | npm serialize-javascript |
Express XSS Sanitizer: allowedTags/allowedAttributes bypass leads to permissive sanitization (XSS risk) CVE-2026-33979, GHSA-3843-rr4g-m8jq | High | 0.4% | 27 Mar, 2026 | npm express-xss-sanitizer |
Postiz has Multiple SSRF Vectors - Webhooks, RSS Feed, URL Loader GHSA-89v5-38xr-9m4j | High | Not scored | 27 Mar, 2026 | npm postiz |
Postiz App has a High-Severity SSRF Vulnerability via Next.js GHSA-vj2p-7pgw-g2wf | High | Not scored | 27 Mar, 2026 | npm postiz |
Forge has signature forgery in Ed25519 due to missing S > L check CVE-2026-33895, GHSA-q67f-28xg-22rw | High | 0.5% | 26 Mar, 2026 | npm node-forge |
node-forge RSA PKCS#1 v1.5 signature verification accepts extra nested DigestAlgorithm elements CVE-2026-33894, CVE-2026-85393, GHSA-86w9-cpqp-85rv, GHSA-ppp5-5v6c-4jwp | High | 0.5% | 26 Mar, 2026 | npm node-forge |
Forge has Denial of Service via Infinite Loop in BigInteger.modInverse() with Zero Input CVE-2026-33891, GHSA-5m6q-g25r-mvwx | High | 0.6% | 26 Mar, 2026 | npm node-forge |
OpenClaw's mutating internal ACP chat commands missed operator.admin scope enforcement CVE-2026-35631, GHSA-3w6x-gv34-mqpf | High | 0.2% | 26 Mar, 2026 | npm openclaw |
OpenClaw Exposes Credentials Embedded in baseUrl Fields via config.get and channels.status CVE-2026-35644, GHSA-ppwq-6v66-5m6j | High | 0.2% | 26 Mar, 2026 | npm openclaw |
OpenClaw has Inconsistent Host Exec Environment Override Sanitization CVE-2026-35650, GHSA-39pp-xp36-q6mg | High | 0.5% | 26 Mar, 2026 | npm openclaw |
OpenClaw's Trusted-proxy Control UI sessions retain privileged scopes without device identity on device-less allow paths CVE-2026-35638, GHSA-48vw-m3qc-wr99 | High | 0.3% | 26 Mar, 2026 | npm openclaw |
OpenClaw: Remote media error responses could trigger unbounded memory allocation before failure CVE-2026-35633, GHSA-4qwc-c7g9-4xcw | High | 0.4% | 26 Mar, 2026 | npm openclaw |
OpenClaw: Arbitrary code execution via unvalidated WebView JavascriptInterface CVE-2026-35643, GHSA-cxmw-p77q-wchg | High | 0.4% | 26 Mar, 2026 | npm openclaw |
path-to-regexp vulnerable to Denial of Service via sequential optional groups CVE-2026-4926, GHSA-j3q9-mxjg-w52f | High | 0.8% | 26 Mar, 2026 | npm path-to-regexp |
OpenClaw's system.run allowlist can be bypassed through an unregistered time dispatch wrapper CVE-2026-35666, GHSA-qm9x-v7cx-7rq4 | High | 0.4% | 26 Mar, 2026 | npm openclaw |
OpenClaw: Nostr inbound DMs could trigger unauthenticated crypto work before sender policy enforcement CVE-2026-35627, GHSA-65h8-27jh-q8wv | High | 0.5% | 26 Mar, 2026 | npm openclaw |
OpenClaw: Gateway agent /reset exposes admin session reset to operator.write callers CVE-2026-35660, GHSA-wq58-2pvg-5h4f | High | 0.3% | 26 Mar, 2026 | npm openclaw |
OpenClaw: Plivo V2 verified replay identity drifts on query-only variants CVE-2026-35618, GHSA-cg6c-q2hx-69h7 | High | 0.3% | 26 Mar, 2026 | npm openclaw |
brace-expansion: Zero-step sequence causes process hang and memory exhaustion CVE-2026-33750, GHSA-f886-m6hf-6m8v | High | 0.4% | 26 Mar, 2026 | npm brace-expansion |
OpenClaw is vulnerable to Path Traversal through path validation bypass CVE-2026-32846, GHSA-f6pf-4gjx-c94r, GHSA-hggm-x7r9-mm7v | High | 0.7% | 26 Mar, 2026 | npm openclaw |