Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
OpenClaw's Node system.run approval hardening wrapper semantic drift can execute unintended local scripts CVE-2026-29608, GHSA-h3rm-6x7g-882f | Medium | 0.1% | 03 Mar, 2026 | npm openclaw |
OpenClaw: Node camera URL payload host-binding bypass allowed gateway fetch pivots GHSA-2858-xg23-26fp | Medium | Not scored | 03 Mar, 2026 | npm openclaw |
MCP NMAP Server has an Injection vulnerability CVE-2026-3484, GHSA-xc68-rrqc-qgq3 | Medium | 3.3% | 03 Mar, 2026 | npm mcp-nmap-server |
OpenClaw vulnerable to arbitrary file read via $include directive CVE-2026-32061, GHSA-56pc-6hvp-4gv4 | Medium | 0.2% | 03 Mar, 2026 | npm openclaw |
OpenClaw's system.run allowlist bypass via shell line-continuation command substitution CVE-2026-28460, GHSA-9868-vxmx-w862 | Medium | 0.5% | 03 Mar, 2026 | npm openclaw |
OpenClaw's config env vars allowed startup env injection into service runtime CVE-2026-22177, GHSA-8fmp-37rc-p5g7 | Medium | 0.4% | 03 Mar, 2026 | npm openclaw |
OpenClaw's tools.exec.safeBins trusted PATH directories allowed binary shadowing in allowlist mode GHSA-qhrr-grqp-6x2g | Medium | Not scored | 03 Mar, 2026 | npm openclaw |
OpenClaw's Slack reaction/pin sender-policy consistency issue in non-message ingress CVE-2026-32899, GHSA-rm2p-j3r7-4x4j | Medium | 0.2% | 03 Mar, 2026 | npm openclaw |
OpenClaw's system.run shell-wrapper positional argv carriers could execute hidden commands under misleading approval text CVE-2026-32052, GHSA-6rcp-vxwf-3mfp | Medium | 0.9% | 03 Mar, 2026 | npm openclaw |
OpenClaw's system.run approval TOCTOU via mutable symlink cwd target on node host CVE-2026-32043, GHSA-mwcg-wfq3-4gjc | Medium | 0.1% | 03 Mar, 2026 | npm openclaw |
OpenClaw's dispatch-wrapper depth-cap mismatch can bypass shell-wrapper approval gating in system.run allowlist mode CVE-2026-32023, GHSA-ccg8-46r6-9qgj | Medium | 0.3% | 03 Mar, 2026 | npm openclaw |
OpenClaw's voice-call Twilio webhook replay could bypass manager dedupe because normalized event IDs were randomized per parse CVE-2026-32053, GHSA-vqx8-9xxw-f2m7 | Medium | 0.4% | 03 Mar, 2026 | npm openclaw |
OpenClaw safeBins grep -e File Read Bypass (stdin-only policy bypass) CVE-2026-32022, GHSA-3xfw-4pmr-4xc5 | Medium | 0.3% | 03 Mar, 2026 | npm openclaw |
OpenClaw: Unauthorized Telegram Senders Trigger Media Download and Disk Write Before Access Check GHSA-h656-5vcf-cm23 | Medium | Not scored | 03 Mar, 2026 | npm openclaw |
DOMPurify contains a Cross-site Scripting vulnerability CVE-2026-0540, GHSA-v2wj-7wpq-c8vv | Medium | 0.4% | 03 Mar, 2026 | npm dompurify |
DOMPurify contains a Cross-site Scripting vulnerability CVE-2025-15599, GHSA-v8jm-5vwx-cfxm | Medium | 0.3% | 03 Mar, 2026 | npm dompurify |
OpenClaw: Chrome --no-sandbox disabled OS-level browser sandbox in sandbox browser container CVE-2026-32046, GHSA-43x4-g22p-3hrq | Medium | 0.3% | 03 Mar, 2026 | npm openclaw |
OpenClaw: macOS beta onboarding exposed PKCE verifier via OAuth state CVE-2026-3691, GHSA-6g25-pc82-vfwp | Medium | 0.5% | 03 Mar, 2026 | npm openclaw |
OpenClaw has hook auth rate limiter bypass via IPv4-mapped IPv6 client key variants GHSA-5847-rm3g-23mw | Medium | Not scored | 03 Mar, 2026 | npm openclaw |
OpenClaw's avatar symlink traversal can expose out-of-workspace local files CVE-2026-32024, GHSA-rx3g-mvc3-qfjf | Medium | 0.3% | 03 Mar, 2026 | npm openclaw |
OpenClaw: system.run approval identity mismatch could execute a different binary than displayed CVE-2026-32065, GHSA-hwpq-rrpf-pgcq | Medium | 0.3% | 02 Mar, 2026 | npm openclaw |
OpenClaw vulnerable to path traversal (Zip Slip) in archive extraction during explicit installation commands CVE-2026-28486, GHSA-v892-hwpg-jwqp | Medium | 0.2% | 02 Mar, 2026 | npm openclaw |
OpenClaw's sandbox skill mirroring path traversal vulnerability could write outside the sandbox workspace CVE-2026-28457, GHSA-xw4p-pw82-hqr7 | Medium | 0.1% | 02 Mar, 2026 | npm openclaw |
OpenClaw: Config writes could persist resolved ${VAR} secrets to disk CVE-2026-28475, GHSA-47q7-97xp-m272 | Medium | 0.3% | 02 Mar, 2026 | npm openclaw |
OpenClaw: Node exec approvals could be replayed across nodes GHSA-6x2m-hqfw-hvpj | Medium | Not scored | 02 Mar, 2026 | npm openclaw |
OpenClaw's Control UI Static File Handler Follows Symlinks and Allows Out-of-Root File Read CVE-2026-32020, GHSA-5ghc-98wh-gwwf | Medium | 0.1% | 02 Mar, 2026 | npm openclaw |
OpenClaw has browser trace/download path symlink escape in temp output handling CVE-2026-32054, GHSA-36h3-7c54-j27r | Medium | 0.1% | 02 Mar, 2026 | npm openclaw |
OpenClaw has ReDoS and regex injection via unescaped Feishu mention metadata in RegExp construction CVE-2026-22178, GHSA-c6hr-w26q-c636 | Medium | 0.3% | 02 Mar, 2026 | npm openclaw |
OpenClaw macOS companion app (beta): allowlist parsing mismatch for system.run shell chains CVE-2026-31993, GHSA-5f9p-f3w2-fwch | Medium | 0.3% | 02 Mar, 2026 | npm openclaw |
OpenClaw has an unauthorized sender bypass in its stop triggers and /models command authorization GHSA-8m9v-xpgf-g99m | Medium | Not scored | 02 Mar, 2026 | npm openclaw |
OpenClaw: Unicode canonicalization drift in node metadata policy classification could broaden node allowlists GHSA-392f-ggf5-fp3c | Medium | Not scored | 02 Mar, 2026 | npm openclaw |
NocoDB Vulnerable to Stored Cross-Site Scripting via Rich Text Cells CVE-2026-28401, GHSA-wwp2-x4rj-j8rm | Medium | 0.2% | 02 Mar, 2026 | npm nocodb |
NocoDB Vulnerable to SQL Injection via DATEADD Formula CVE-2026-28399, GHSA-45rp-9p97-h852 | Medium | 0.4% | 02 Mar, 2026 | npm nocodb |
NocoDB Vulnerable to Stored Cross-Site Scripting via Comments and Rich Text Cells CVE-2026-28398, GHSA-8vm4-g489-v3w7 | Medium | 0.2% | 02 Mar, 2026 | npm nocodb |
NocoDB Vulnerable to Stored Cross-site Scripting via Comments CVE-2026-28397, GHSA-rcph-x7mj-54mm | Medium | 0.2% | 02 Mar, 2026 | npm nocodb |
NocoDB's Refresh Tokens Not Revoked on Password Reset CVE-2026-28396, GHSA-x4vh-j75g-268g | Medium | 0.2% | 02 Mar, 2026 | npm nocodb |
NocoDB Missing Ownership Validation in MCP Token Operations CVE-2026-28361, GHSA-p9x3-w98f-7j3q | Medium | 0.2% | 02 Mar, 2026 | npm nocodb |
NocoDB Vulnerable to Stored Cross-site Scripting via Rich Text Field CVE-2026-28359, GHSA-qxwq-q265-hc44 | Medium | 0.2% | 02 Mar, 2026 | npm nocodb |
NocoDB has Stored Cross-site Scripting via Formula Cell CVE-2026-28357, GHSA-vx5p-q85x-xm3c | Medium | 0.2% | 02 Mar, 2026 | npm nocodb |
OpenClaw ACP client has permission auto-approval bypass via untrusted tool metadata CVE-2026-32898, GHSA-7jx5-9fjg-hp4m | Medium | 0.3% | 27 Feb, 2026 | npm openclaw |
OpenClaw: Skill env override host env injection via applySkillConfigEnvOverrides (defense-in-depth) CVE-2026-4039, GHSA-82g8-464f-2mv7 | Medium | 0.3% | 27 Feb, 2026 | npm openclaw |
@actual-app/sync-server: Missing authorization in sync endpoints allows cross-user budget file access in multi-user mode CVE-2026-27638, GHSA-qmjj-p7m9-wjrv | Medium | 0.3% | 26 Feb, 2026 | npm @actual-app/sync-server |
n8n has Webhook Forgery on Zendesk Trigger Node CVE-2026-56360, GHSA-38c7-23hj-2wgq | Medium | 0.3% | 26 Feb, 2026 | npm n8n |
n8n has a Guardrail Node Bypass CVE-2026-56349, GHSA-fvfv-ppw4-7h2w | Medium | 0.5% | 26 Feb, 2026 | npm n8n |
n8n has an Authentication Bypass in its Chat Trigger Node CVE-2026-56353, GHSA-jh8h-6c9q-7gmw | Medium | 0.3% | 26 Feb, 2026 | npm n8n |
n8n has an SSO Enforcement Bypass in its Self-Service Settings API CVE-2026-56350, GHSA-vjf3-2gpj-233v | Medium | 0.4% | 26 Feb, 2026 | npm n8n |
n8n: Webhook Forgery on Github Webhook Trigger CVE-2026-56357, GHSA-mqpr-49jj-32rc | Medium | 0.3% | 26 Feb, 2026 | npm n8n |
n8n: SQL Injection in MySQL, PostgreSQL, and Microsoft SQL nodes CVE-2026-56351, GHSA-f3f2-mcxc-pwjx | Medium | 0.4% | 26 Feb, 2026 | npm n8n |
Svelte: XSS via HTML Comment Injection in SSR Error Boundary Hydration Markers CVE-2026-27902, GHSA-qgvg-pr8v-6rr3 | Medium | 0.3% | 26 Feb, 2026 | npm svelte |
Svelte vulnerable to XSS during SSR with contenteditable `bind:innerText` and `bind:textContent` CVE-2026-27901, GHSA-phwv-c562-gvmh | Medium | 0.3% | 26 Feb, 2026 | npm svelte |