Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Flowise has Insufficient Password Salt Rounds CVE-2026-56272, GHSA-x2g5-fvc2-gqvp | Medium | 0.1% | 05 Mar, 2026 | npm flowise |
Fastify's Missing End Anchor in "subtypeNameReg" Allows Malformed Content-Types to Pass Validation CVE-2026-3419, GHSA-573f-x89g-hqp9 | Medium | 0.4% | 05 Mar, 2026 | npm fastify |
Fonoster is vulnerable to directory traversal CVE-2024-43035, GHSA-9fv2-c7v6-p45w | Medium | 2.5% | 05 Mar, 2026 | npm @fonoster/voice |
Mercurius: Incorrect Content-Type parsing can lead to CSRF attack CVE-2025-64166, GHSA-v66j-6wwf-jc57 | Medium | 0.2% | 05 Mar, 2026 | npm mercurius |
@backstage/plugin-scaffolder-backend Vulnerable to Potential Session Token Exfiltration via Log Redaction Bypass CVE-2026-29184, GHSA-8qp7-fhr9-fw53 | Medium | 0.3% | 05 Mar, 2026 | npm @backstage/plugin-scaffolder-backend |
Hono Vulnerable to Cookie Attribute Injection via Unsanitized domain and path in setCookie() CVE-2026-29086, GHSA-5pq2-9x2x-5p6w | Medium | 0.2% | 04 Mar, 2026 | npm hono |
Hono Vulnerable to SSE Control Field Injection via CR/LF in writeSSE() CVE-2026-29085, GHSA-p6xx-57qc-3wxr | Medium | 0.3% | 04 Mar, 2026 | npm hono |
OpenClaw: BlueBubbles (optional plugin) pairing/allowlist mismatch when allowFrom is empty CVE-2026-22170, GHSA-jwf4-8wf4-jf2m | Medium | 0.3% | 04 Mar, 2026 | npm openclaw |
OpenClaw Vulnerable to Local File Exfiltration via MCP Tool Result MEDIA: Directive Injection GHSA-jjgj-cpp9-cvpv | Medium | Not scored | 04 Mar, 2026 | npm openclaw |
OpenClaw's image tool bypasses tools.fs.workspaceOnly on sandbox mount paths and exfiltrates out-of-workspace images CVE-2026-32002, GHSA-q6qf-4p5j-r25g | Medium | 0.3% | 04 Mar, 2026 | npm openclaw |
OpenClaw has incomplete IPv4 special-use SSRF blocking in web fetch guard CVE-2026-32019, GHSA-4rqq-w8v4-7p47 | Medium | 0.2% | 04 Mar, 2026 | npm openclaw |
OpenClaw has agent avatar symlink traversal in gateway session metadata GHSA-9mph-4f7v-fmvh | Medium | Not scored | 04 Mar, 2026 | npm openclaw |
OpenClaw's elevated allowFrom accepted broader identity signals than specified within sender-scoped authorization GHSA-f6h3-846h-2r8w | Medium | Not scored | 04 Mar, 2026 | npm openclaw |
OpenClaw has SSRF guard bypass via IPv6 transition over ISATAP GHSA-8cp7-rp8r-mg77 | Medium | Not scored | 04 Mar, 2026 | npm openclaw |
CKEditor 5 has Cross-site Scripting (XSS) in the HTML Support package CVE-2026-28343, GHSA-jrqm-vmqc-gm93 | Medium | 0.3% | 04 Mar, 2026 | npm @ckeditor/ckeditor5-html-support npm ckeditor5 |
OpenClaw's serialize sandbox registry writes to prevent races and delete-rollback corruption CVE-2026-32018, GHSA-gq83-8q7q-9hfx | Medium | 0.1% | 03 Mar, 2026 | npm openclaw |
OpenClaw's Node role device-identity bypass allows unauthorized node.event injection CVE-2026-32001, GHSA-rv2q-f2h5-6xmg | Medium | 0.3% | 03 Mar, 2026 | npm openclaw |
OpenClaw has Windows Lobster shell fallback command injection in constrained fallback path CVE-2026-31995, GHSA-fg3m-vhrr-8gj6 | Medium | 0.5% | 03 Mar, 2026 | npm openclaw |
OpenClaw's Zalo group sender allowlist bypass permits unauthorized GROUP dispatch GHSA-534w-2vm4-89xr | Medium | Not scored | 03 Mar, 2026 | npm openclaw |
OpenClaw has Canvas route hardening for mixed-trust deployments GHSA-cjv3-m589-v3rx | Medium | Not scored | 03 Mar, 2026 | npm openclaw |
OpenClaw's typed sender-key matching for toolsBySender prevents identity-collision policy bypass CVE-2026-32039, GHSA-wpph-cjgr-7c39 | Medium | 0.2% | 03 Mar, 2026 | npm openclaw |
OpenClaw's Signal reaction-only status events could, in limited cases, be enqueued before access checks CVE-2026-32050, GHSA-792q-qw95-f446 | Medium | 0.2% | 03 Mar, 2026 | npm openclaw |
OpenClaw's Nextcloud Talk webhook replay could trigger duplicate inbound processing CVE-2026-28449, GHSA-r9q5-c7qc-p26w | Medium | 0.3% | 03 Mar, 2026 | npm openclaw |
OpenClaw reuses the gateway auth token in the owner ID prompt hashing fallback CVE-2026-32897, GHSA-v6x2-2qvm-6gv8 | Medium | 0.3% | 03 Mar, 2026 | npm openclaw |
In OpenClaw, manually adding sort to tools.exec.safeBins could bypass allowlist approval via --compress-program CVE-2026-32010, GHSA-4gc7-qcvf-38wg | Medium | 0.3% | 03 Mar, 2026 | npm openclaw |
OpenClaw has a BlueBubbles group allowlist mismatch via DM pairing-store fallback CVE-2026-32006, GHSA-25pw-4h6w-qwvm | Medium | 0.3% | 03 Mar, 2026 | npm openclaw |
OpenClaw has exec allowlist/safeBins policy-runtime mismatch via env -S wrapper interpretation GHSA-796m-2973-wc5q | Medium | Not scored | 03 Mar, 2026 | npm openclaw |
OpenClaw improperly parses X-Forwarded-For behind trusted proxies allows client IP spoofing in security decisions CVE-2026-32029, GHSA-2rgf-hm63-5qph | Medium | 0.2% | 03 Mar, 2026 | npm openclaw |
OpenClaw has a workspace-only sandbox guard mismatch for @-prefixed absolute paths CVE-2026-32033, GHSA-27cr-4p5m-74rj | Medium | 0.3% | 03 Mar, 2026 | npm openclaw |
OpenClaw has stored XSS in exported session HTML viewer via markdown/raw-HTML rendering GHSA-r294-2894-92j3 | Medium | Not scored | 03 Mar, 2026 | npm openclaw |
OpenClaw has a Trusted-proxy Control UI pairing bypass which allows unpaired node sessions CVE-2026-32057, GHSA-vvgp-4c28-m3jm | Medium | 0.3% | 03 Mar, 2026 | npm openclaw |
OpenClaw Loopback CDP probe can leak Gateway token to local listener CVE-2026-22174, GHSA-v3j7-34xh-6g3w | Medium | 0.1% | 03 Mar, 2026 | npm openclaw |
OpenClaw has a Discord `allowFrom` slug-collision authorization bypass GHSA-4cqv-h74h-93j4 | Medium | Not scored | 03 Mar, 2026 | npm openclaw |
OpenClaw has an opt-in insecure Control UI auth over plaintext HTTP could allow privileged access CVE-2026-32034, GHSA-3cvx-236h-m9fj | Medium | 0.4% | 03 Mar, 2026 | npm openclaw |
OpenClaw has a IPv6 multicast SSRF classifier bypass GHSA-h97f-6pqj-q452 | Medium | Not scored | 03 Mar, 2026 | npm openclaw |
OpenClaw exec allowlist safeBins short-option bypass could permit arbitrary file write CVE-2026-32017, GHSA-3x3x-h76w-hp98 | Medium | 0.3% | 03 Mar, 2026 | npm openclaw |
OpenClaw has auth inconsistency on local Browser Extension Relay /extension endpoint GHSA-pfv7-rr5m-qmv6 | Medium | Not scored | 03 Mar, 2026 | npm openclaw |
OpenClaw has a Feishu allowFrom authorization bypass via display-name collision CVE-2026-32021, GHSA-j4xf-96qf-rx69 | Medium | 0.2% | 03 Mar, 2026 | npm openclaw |
OpenClaw shell-env fallback trusted startup env and could execute attacker-influenced login-shell paths GHSA-5h2c-8v84-qpvr | Medium | Not scored | 03 Mar, 2026 | npm openclaw |
OpenClaw plugin runtime command execution is part of trusted plugin boundary GHSA-ff98-w8hj-qrxf | Medium | Not scored | 03 Mar, 2026 | npm openclaw |
OpenClaw: MS Teams fileConsent/invoke missing conversation binding allowed cross-conversation pending-upload consumption GHSA-j26j-7qc4-3mrf | Medium | Not scored | 03 Mar, 2026 | npm openclaw |
OpenClaw's owner-only gateway tool access checks were incomplete in specific authenticated DM flows GHSA-2hm8-rqrm-xfjq | Medium | Not scored | 03 Mar, 2026 | npm openclaw |
OpenClaw: shell-env trusted-prefix fallback allowed attacker-controlled binary execution via $SHELL CVE-2026-22217, GHSA-p4wh-cr8m-gm6c | Medium | 0.1% | 03 Mar, 2026 | npm openclaw |
OpenClaw: BlueBubbles beta plugin webhook auth hardening (remove passwordless fallback) CVE-2026-32896, GHSA-5mx2-2mgw-x8rm | Medium | 0.3% | 03 Mar, 2026 | npm openclaw |
OpenClaw affected by iMessage remote attachment SCP hardening (strict host-key checks and remoteHost validation) GHSA-2mc2-g238-722j | Medium | Not scored | 03 Mar, 2026 | npm openclaw |
OpenClaw skills-install-download: tar.bz2 extraction bypassed archive safety parity checks (local DoS) CVE-2026-32044, GHSA-77hf-7fqf-f227 | Medium | 0.1% | 03 Mar, 2026 | npm openclaw |
OpenClaw: Discord voice transcript owner-flag omission could expose owner-only tools in mixed-trust channels CVE-2026-32035, GHSA-wpg9-4g4v-f9rc | Medium | 0.1% | 03 Mar, 2026 | npm openclaw |
OpenClaw: Discord DM reaction ingress missed dmPolicy/allowFrom checks in restricted setups CVE-2026-32028, GHSA-354r-7mfh-7rh2 | Medium | 0.2% | 03 Mar, 2026 | npm openclaw |
OpenClaw: Unified root-bound write hardening for browser output and related path-boundary flows CVE-2026-22180, GHSA-3pxq-f3cp-jmxp | Medium | 0.1% | 03 Mar, 2026 | npm openclaw |
OpenClaw's web tools strict URL guard could lose DNS pinning when env proxy is configured CVE-2026-22181, GHSA-8mvx-p2r9-r375 | Medium | 0.2% | 03 Mar, 2026 | npm openclaw |