Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in react-spa-shadcn (npm) GHSA-c6cr-p8wf-qmjh, MAL-2026-2931 | Malicious | Not scored | 19 Apr, 2026 | npm react-spa-shadcn |
Malicious release: Malicious code in pa-marked (npm) MAL-2026-2927 | Malicious | Not scored | 19 Apr, 2026 | npm pa-marked |
Malicious release: Malicious code in rtms-manager (npm) GHSA-5cq2-xfqr-cmvg, MAL-2026-2862 | Malicious | Not scored | 19 Apr, 2026 | npm rtms-manager |
Malicious release: Malicious code in vinext-monorepo (npm) MAL-2026-2861 | Malicious | Not scored | 19 Apr, 2026 | npm vinext-monorepo |
Malicious release: Malicious code in sy-editor-v3 (npm) MAL-2026-2932 | Malicious | Not scored | 19 Apr, 2026 | npm sy-editor-v3 |
Malicious release: Malicious code in @shoobx/types (npm) GHSA-9jhq-mjgj-698m, MAL-2026-2857 | Malicious | Not scored | 18 Apr, 2026 | npm @shoobx/types |
Malicious release: Malicious code in @source-row/source-container (npm) GHSA-x8p5-jmxq-hp52, MAL-2026-2858 | Malicious | Not scored | 18 Apr, 2026 | npm @source-row/source-container |
Malicious release: Malicious code in @ataslkit/profilecard (npm) GHSA-3m34-94wv-xw5q, MAL-2026-2856 | Malicious | Not scored | 18 Apr, 2026 | npm @ataslkit/profilecard |
Malicious release: Malicious code in react-resource-router-next (npm) GHSA-7hgr-34h5-w2m5, MAL-2026-2855 | Malicious | Not scored | 18 Apr, 2026 | npm react-resource-router-next |
Malicious release: Malicious code in cktool.core.internal (npm) GHSA-52g9-vwwf-5wm4, MAL-2026-2924 | Malicious | Not scored | 18 Apr, 2026 | npm cktool.core.internal |
Malicious release: Malicious code in cktool.config (npm) GHSA-2rgm-r9mf-qcvf, MAL-2026-2923 | Malicious | Not scored | 18 Apr, 2026 | npm cktool.config |
Malicious release: Malicious code in cktool.api (npm) GHSA-82v9-v4pr-3fv5, MAL-2026-2922 | Malicious | Not scored | 18 Apr, 2026 | npm cktool.api |
Malicious release: Malicious code in cktool.internal (npm) GHSA-49vv-fr4f-qphw, MAL-2026-2925 | Malicious | Not scored | 18 Apr, 2026 | npm cktool.internal |
Malicious release: Malicious code in apple-idms-internal (npm) GHSA-x7r7-7xmr-4v2x, MAL-2026-2919 | Malicious | Not scored | 18 Apr, 2026 | npm apple-idms-internal |
Malicious release: Malicious code in apple-cloudkit-internal (npm) GHSA-phc7-xwvq-32mh, MAL-2026-2918 | Malicious | Not scored | 18 Apr, 2026 | npm apple-cloudkit-internal |
Malicious release: Malicious code in react-hook-form (npm) GHSA-w8j3-qvc3-h56f, MAL-2026-2853 | Malicious | Not scored | 18 Apr, 2026 | npm react-hook-form |
Malicious release: Malicious code in ac-sasskit-internal (npm) GHSA-cxqq-9fj8-v9x8, MAL-2026-2917 | Malicious | Not scored | 18 Apr, 2026 | npm ac-sasskit-internal |
Flowise: Airtable_Agent Code Injection Remote Code Execution Vulnerability CVE-2026-41265, GHSA-v38x-c887-992f | Critical | 0.6% | 18 Apr, 2026 | npm flowise npm flowise-components |
OpenClaw: QMD memory_get restricts reads to canonical or indexed memory paths CVE-2026-44111, GHSA-f934-5rqf-xx47 | Medium | 0.2% | 17 Apr, 2026 | npm openclaw |
OpenClaw: Webchat media embedding enforces local-root containment for tool-result files CVE-2026-41389, GHSA-mr34-9552-qr95 | Medium | 0.3% | 17 Apr, 2026 | npm openclaw |
OpenClaw: Feishu webhook and card-action validation now fail closed CVE-2026-44109, GHSA-xh72-v6v9-mwhc | Critical | 0.7% | 17 Apr, 2026 | npm openclaw |
OpenClaw: Matrix room control-command authorization no longer trusts DM pairing-store entries CVE-2026-44110, GHSA-2gvc-4f3c-2855 | High | 0.3% | 17 Apr, 2026 | npm openclaw |
OpenClaw: Gateway HTTP endpoints re-resolve bearer auth after SecretRef rotation CVE-2026-43585, GHSA-xmxx-7p24-h892 | Critical | 0.5% | 17 Apr, 2026 | npm openclaw |
Remote Code Execution (RCE) via String Literal Injection into math-codegen CVE-2026-41507, GHSA-p6x5-p4xf-cc4r | Critical | 0.4% | 17 Apr, 2026 | npm math-codegen |
OpenClaw: CDP /json/version WebSocket URL could pivot to untrusted second-hop targets CVE-2026-43576, GHSA-f7fh-qg34-x2xh | Medium | 0.3% | 17 Apr, 2026 | npm openclaw |
OpenClaw: Sender policy bypass in host media attachment reads allows unauthorized local file disclosure CVE-2026-42438, GHSA-jhpv-5j76-m56h | Medium | 0.2% | 17 Apr, 2026 | npm openclaw |
OpenClaw: QQBot media tags could read arbitrary local files through reply text CVE-2026-43533, GHSA-66r7-m7xm-v49h | High | 0.4% | 17 Apr, 2026 | npm openclaw |
OpenClaw: busybox and toybox applet execution weakened exec approval binding CVE-2026-43530, GHSA-2cq5-mf3v-mx44 | High | 0.4% | 17 Apr, 2026 | npm openclaw |
OpenClaw: Matrix profile config persistence was reachable from operator.write message tools CVE-2026-42433, GHSA-7jp6-r74r-995q | High | 0.3% | 17 Apr, 2026 | npm openclaw |
OpenClaw: Sandboxed agents could escape exec routing via host=node override CVE-2026-42434, GHSA-736r-jwj6-4w23 | High | 0.3% | 17 Apr, 2026 | npm openclaw |
OpenClaw: Browser press/type interaction routes missed complete navigation guard coverage CVE-2026-43580, GHSA-536q-mj95-h29h | Medium | 0.3% | 17 Apr, 2026 | npm openclaw |
OpenClaw: Browser interaction routes could pivot into local CDP and regain file reads CVE-2026-43577, GHSA-qmwg-qprg-3j38 | High | 0.3% | 17 Apr, 2026 | npm openclaw |
OpenClaw: Workspace provider auth choices could auto-enable untrusted provider plugins CVE-2026-43569, GHSA-939r-rj45-g2rj | High | 0.4% | 17 Apr, 2026 | npm openclaw |
OpenClaw: Existing-session browser interaction routes bypassed SSRF policy enforcement CVE-2026-43573, GHSA-527m-976r-jf79 | Medium | 0.3% | 17 Apr, 2026 | npm openclaw |
OpenClaw: Browser tabs action select and close routes bypassed SSRF policy CVE-2026-42439, GHSA-rj2p-j66c-mgqh | Medium | 0.2% | 17 Apr, 2026 | npm openclaw |
OpenClaw: Nostr profile mutation routes allowed operator.write config persistence CVE-2026-43579, GHSA-f3h5-h452-vp3j | Medium | 0.2% | 17 Apr, 2026 | npm openclaw |
OpenClaw: Sandbox browser CDP relay could expose DevTools protocol on 0.0.0.0 CVE-2026-43581, GHSA-525j-hqq2-66r4 | Critical | 0.2% | 17 Apr, 2026 | npm openclaw |
OpenClaw: Channel setup catalog lookups could include untrusted workspace plugin shadows CVE-2026-43571, GHSA-82qx-6vj7-p8m2 | High | 0.4% | 17 Apr, 2026 | npm openclaw |
OpenClaw: screen_record outPath bypassed workspace-only filesystem guard CVE-2026-43567, GHSA-jf25-7968-h2h5 | High | 0.2% | 17 Apr, 2026 | npm openclaw |
OpenClaw: Browser SSRF policy default allowed private-network navigation CVE-2026-43527, GHSA-53vx-pmqw-863c | Medium | 0.3% | 17 Apr, 2026 | npm openclaw |
OpenClaw: Browser SSRF hostname validation could be bypassed by DNS rebinding CVE-2026-43582, GHSA-xq94-r468-qwgj | Medium | 0.2% | 17 Apr, 2026 | npm openclaw |
OpenClaw: QQBot reply media URL handling could trigger SSRF and re-upload fetched bytes CVE-2026-43526, GHSA-2767-2q9v-9326 | High | 0.3% | 17 Apr, 2026 | npm openclaw |
OpenClaw: Workspace .env could inject OpenClaw runtime-control variables CVE-2026-43531, GHSA-7wv4-cc7p-jhxc | High | 0.2% | 17 Apr, 2026 | npm openclaw |
OpenClaw: Discord event cover images bypassed sandbox media normalization CVE-2026-43532, GHSA-c9h3-5p7r-mrjh | Medium | 0.3% | 17 Apr, 2026 | npm openclaw |
OpenClaw: Empty approver lists could grant explicit approval authorization CVE-2026-43574, GHSA-49cg-279w-m73x | Medium | 0.2% | 17 Apr, 2026 | npm openclaw |
OpenClaw: Agent hook events could enqueue trusted system events from unsanitized external input CVE-2026-43534, GHSA-7g8c-cfr3-vqqr | Critical | 0.2% | 17 Apr, 2026 | npm openclaw |
OpenClaw: Exec environment denylist missed high-risk interpreter startup variables CVE-2026-43584, GHSA-vfp4-8x56-j7c5 | High | 0.4% | 17 Apr, 2026 | npm openclaw |
OpenClaw: Shell-wrapper detection missed env-argv assignment injection forms CVE-2026-42435, GHSA-j6c7-3h5x-99g9 | High | 0.4% | 17 Apr, 2026 | npm openclaw |
OpenClaw: Memory dreaming config persistence was reachable from operator.write commands CVE-2026-43568, GHSA-5gjc-grvm-m88j | High | 0.2% | 17 Apr, 2026 | npm openclaw |
OpenClaw: Microsoft Teams SSO invoke handler missed sender authorization checks CVE-2026-43572, GHSA-gc9r-867r-j85f | Medium | 0.2% | 17 Apr, 2026 | npm openclaw |