Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Angular SSR has an Open Redirect via X-Forwarded-Prefix CVE-2026-27738, GHSA-xh43-g2fq-wjrj | Medium | 0.4% | 25 Feb, 2026 | npm @angular/ssr |
repostat: Reflected Cross-Site Scripting (XSS) via repo prop in RepoCard CVE-2026-27612, GHSA-fm8c-6m29-rp6j | Medium | 0.2% | 25 Feb, 2026 | npm repostat |
Payload: Server-Side Request Forgery (SSRF) in External File URL Uploads CVE-2026-27567, GHSA-hhfx-5x8j-f5f6 | Medium | 0.3% | 24 Feb, 2026 | npm payload |
Astro has Full-Read SSRF in error rendering via Host: header injection CVE-2026-25545, GHSA-qq67-mvv5-fw3g | Medium | 1.9% | 23 Feb, 2026 | npm @astrojs/node |
OpenClaw: ACP prompt-size checks missing in local stdio bridge could reduce responsiveness with very large inputs CVE-2026-27576, GHSA-cxpw-2g23-2vgw | Medium | 0.2% | 20 Feb, 2026 | npm openclaw |
Lettermint Node.js SDK leaks email properties to unintended recipients when client instance is reused CVE-2026-27492, GHSA-49pc-8936-wvfp | Medium | 0.2% | 20 Feb, 2026 | npm lettermint |
OpenClaw hardened cron webhook delivery against SSRF CVE-2026-27488, GHSA-w45g-5746-x9fp | Medium | 0.4% | 20 Feb, 2026 | npm openclaw |
OpenClaw: Reject symlinks in local skill packaging script CVE-2026-27485, GHSA-r6h2-5gqq-v5v6 | Medium | 0.2% | 20 Feb, 2026 | npm openclaw |
Sync-in Server has a stored cross-site scripting (XSS) vulnerability CVE-2025-67438, GHSA-9jmq-xgjm-p8c2 | Medium | 0.3% | 20 Feb, 2026 | npm @sync-in/server |
bn.js affected by an infinite loop CVE-2026-2739, GHSA-378v-28hj-76wf | Medium | 0.5% | 20 Feb, 2026 | npm bn.js |
OpenClaw safeBins file-existence oracle information disclosure CVE-2026-4040, GHSA-6c9j-x93c-rw6j | Medium | 0.1% | 19 Feb, 2026 | npm openclaw |
Pannellum has a XSS vulnerability in hot spot attributes CVE-2026-27210, GHSA-8423-w5wx-h2r6 | Medium | 0.4% | 19 Feb, 2026 | npm pannellum |
Svelte SSR attribute spreading includes inherited properties from prototype chain CVE-2026-27125, GHSA-crpf-4hrx-3jrp | Medium | 0.4% | 19 Feb, 2026 | npm svelte |
Hono added timing comparison hardening in basicAuth and bearerAuth CVE-2026-56764, GHSA-gq3j-xvxp-8hrf | Medium | 0.3% | 19 Feb, 2026 | npm hono |
OpenClaw has a Web Fetch DoS via unbounded response parsing CVE-2026-28394, GHSA-p536-vvpp-9mc8 | Medium | 0.4% | 19 Feb, 2026 | npm openclaw |
Svelte SSR does not validate dynamic element tag names in `<svelte:element>` CVE-2026-27122, GHSA-m56q-vw4c-c2cp | Medium | 0.2% | 19 Feb, 2026 | npm svelte |
Svelte affected by cross-site scripting via spread attributes in Svelte SSR CVE-2026-27121, GHSA-f7gr-6p89-r883 | Medium | 0.2% | 19 Feb, 2026 | npm svelte |
Svelte affected by XSS in SSR `<option>` element CVE-2026-27119, GHSA-h7h7-mm68-gmrc | Medium | 0.2% | 19 Feb, 2026 | npm svelte |
Cache poisoning in @sveltejs/adapter-vercel CVE-2026-27118, GHSA-9pq4-5hcf-288c | Medium | 0.3% | 19 Feb, 2026 | npm @sveltejs/adapter-vercel |
OpenClaw affected by Stored XSS in Control UI via unsanitized assistant name/avatar in inline script injection CVE-2026-27009, GHSA-37gc-85xm-2ww6 | Medium | 0.3% | 18 Feb, 2026 | npm openclaw |
OpenClaw hardened the skill download target directory validation CVE-2026-27008, GHSA-h7f7-89mm-pqh6 | Medium | 0.2% | 18 Feb, 2026 | npm openclaw |
OpenClaw's sandbox config hash sorted primitive arrays and suppressed needed container recreation CVE-2026-27007, GHSA-xxvh-5hwj-42pp | Medium | 0.2% | 18 Feb, 2026 | npm openclaw |
OpenClaw session tool visibility hardening and Telegram webhook secret fallback CVE-2026-27004, GHSA-6hf3-mhgc-cm65 | Medium | 0.1% | 18 Feb, 2026 | npm openclaw |
OpenClaw: Telegram bot token exposure via logs CVE-2026-27003, GHSA-chf7-jq6g-qrwv | Medium | 0.2% | 18 Feb, 2026 | npm openclaw |
RediSearch Query Injection in @langchain/langgraph-checkpoint-redis CVE-2026-27022, GHSA-5mx2-w598-339m | Medium | 4.0% | 18 Feb, 2026 | npm @langchain/langgraph-checkpoint-redis |
OpenClaw: Process Safety - Unvalidated PID Kill via SIGKILL in Process Cleanup CVE-2026-27486, GHSA-jfv4-h8mc-jcp8 | Medium | 0.3% | 18 Feb, 2026 | npm openclaw |
OpenClaw Chutes manual OAuth state validation bypass can cause credential substitution CVE-2026-28477, GHSA-7rcp-mxpq-72pj | Medium | 0.1% | 18 Feb, 2026 | npm openclaw |
OpenClaw has a Path Traversal in Browser Download Functionality CVE-2026-26972, GHSA-xwjm-j929-xq7c | Medium | 0.2% | 18 Feb, 2026 | npm openclaw |
OpenClaw affected by SSRF in optional Tlon (Urbit) extension authentication CVE-2026-28476, GHSA-pg2v-8xwh-qhcc | Medium | 0.3% | 18 Feb, 2026 | npm openclaw |
OpenClaw Twilio voice-call webhook auth bypass when ngrok loopback compatibility is enabled CVE-2026-29606, GHSA-c37p-4qqg-3p76 | Medium | 0.3% | 18 Feb, 2026 | npm openclaw |
OpenClaw Telegram allowlist authorization accepted mutable usernames CVE-2026-28480, GHSA-mj5r-hh7j-4gxf | Medium | 0.2% | 18 Feb, 2026 | npm clawdbot npm openclaw |
OpenClaw affected by denial of service through unguarded archive extraction allowing high expansion/resource abuse (ZIP/TAR) CVE-2026-28452, GHSA-h89v-j3x9-8wqj | Medium | 0.3% | 18 Feb, 2026 | npm clawdbot npm openclaw |
OpenClaw: denial of service through large base64 media files allocating large buffers before limit checks CVE-2026-29612, GHSA-w2cg-vxx6-5xjg | Medium | 0.3% | 18 Feb, 2026 | npm clawdbot npm openclaw |
OpenClaw iMessage group allowlist authorization inherited DM pairing-store identities CVE-2026-26328, GHSA-g34w-4xqq-h79m | Medium | 0.3% | 18 Feb, 2026 | npm clawdbot npm openclaw |
OpenClaw skills.status could leak secrets to operator.read clients CVE-2026-26326, GHSA-8mh7-phf8-xgfm | Medium | 0.3% | 17 Feb, 2026 | npm openclaw |
OpenClaw MS Teams inbound attachment downloader leaks bearer tokens to allowlisted suffix domains CVE-2026-28481, GHSA-7vwx-582j-j332 | Medium | 0.3% | 17 Feb, 2026 | npm openclaw |
OpenClaw has a Matrix allowlist bypass via displayName and cross-homeserver localpart matching CVE-2026-28471, GHSA-rmxw-jxxx-4cpc | Medium | 0.2% | 17 Feb, 2026 | npm openclaw |
OpenClaw affected by SSRF via attachment/media URL hydration CVE-2026-28467, GHSA-wfp2-v9c7-fh79 | Medium | 0.4% | 17 Feb, 2026 | npm openclaw |
OpenClaw's Chrome extension relay binds publicly due to wildcard treated as loopback CVE-2026-28395, GHSA-qw99-grcx-4pvm | Medium | 0.4% | 17 Feb, 2026 | npm openclaw |
BSV Blockchain SDK has an Authentication Signature Data Preparation Vulnerability CVE-2025-69287, GHSA-vjpq-xx5g-qvmm | Medium | 0.3% | 17 Feb, 2026 | npm @bsv/sdk |
Cloudflare Agents has a Reflected Cross-Site Scripting (XSS) vulnerability in AI Playground site GHSA-w5cr-2qhr-jqc5 | Medium | Not scored | 13 Feb, 2026 | npm agents |
Child processes spawned by Renovate incorrectly have full access to environment variables CVE-2026-76227, GHSA-8wc6-vgrq-x6cf | Medium | 0.2% | 13 Feb, 2026 | npm renovate |
beautiful-mermaid contains an SVG attribute injection issue that can lead to cross-site scripting (XSS) CVE-2026-26226, GHSA-cgmm-x5ww-q5cr | Medium | 0.6% | 13 Feb, 2026 | npm beautiful-mermaid |
Cloudflare Agents is Vulnerable to Reflected Cross-Site Scripting in the AI Playground's OAuth callback handler CVE-2026-1721, GHSA-cvhv-6xm6-c3v4 | Medium | 0.4% | 13 Feb, 2026 | npm agents |
Directus Vulnerable to User Enumeration via Password Reset Timing Attack CVE-2026-26185, GHSA-jr94-gj3h-c8rf | Medium | 0.4% | 12 Feb, 2026 | npm @directus/api npm directus |
@farmfe/core is Missing Origin Validation in WebSocket CVE-2025-56647, GHSA-p773-8mf4-rjm5 | Medium | 0.2% | 12 Feb, 2026 | npm @farmfe/core |
markdown-it is has a Regular Expression Denial of Service (ReDoS) CVE-2026-2327, GHSA-38c4-r59v-3vqw | Medium | 0.7% | 12 Feb, 2026 | npm markdown-it |
qs's arrayLimit bypass in comma parsing allows denial of service CVE-2026-2391, GHSA-w7fw-mjwx-w883 | Medium | 0.5% | 12 Feb, 2026 | npm qs |
ajv has ReDoS when using `$data` option CVE-2025-69873, GHSA-2g4f-4pwh-qvx6 | Medium | 0.5% | 11 Feb, 2026 | npm ajv |
@langchain/community affected by SSRF Bypass in RecursiveUrlLoader via insufficient URL origin validation CVE-2026-26019, GHSA-gf3v-fwqg-4vh7 | Medium | 0.4% | 11 Feb, 2026 | npm @langchain/community |