Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
OpenClaw: Delivery queue recovery could lose group tool-policy context for media replay CVE-2026-43583, GHSA-r77c-2cmr-7p47 | Medium | 0.2% | 17 Apr, 2026 | npm openclaw |
OpenClaw: Heartbeat owner downgrade missed local async exec completion events CVE-2026-43578, GHSA-g375-h3v6-4873 | Critical | 0.3% | 17 Apr, 2026 | npm openclaw |
OpenClaw: Voice-call realtime WebSocket accepted oversized frames CVE-2026-42437, GHSA-vw3h-q6xq-jjm5 | High | 0.4% | 17 Apr, 2026 | npm openclaw |
OpenClaw: Heartbeat owner downgrade missed untrusted webhook wake events CVE-2026-43566, GHSA-g2hm-779g-vm32 | Critical | 0.4% | 17 Apr, 2026 | npm openclaw |
OpenClaw: Browser snapshot and screenshot routes could expose internal page content after navigation CVE-2026-42436, GHSA-c4qm-58hj-j6pj | Medium | 0.3% | 17 Apr, 2026 | npm openclaw |
OpenClaw: config.get redaction bypass through sourceConfig and runtimeConfig aliases CVE-2026-43528, GHSA-8372-7vhw-cm6q | High | 0.3% | 17 Apr, 2026 | npm openclaw |
OpenClaw: Collect-mode queue batches could reuse the last sender authorization context CVE-2026-43535, GHSA-jwrq-8g5x-5fhm | High | 0.2% | 17 Apr, 2026 | npm openclaw |
Flowise: Unauthenticated TTS endpoint accepts arbitrary credential IDs — enables API credit abuse via stored credentials CVE-2026-41279, GHSA-5fw2-mwhh-9947 | High | 0.3% | 17 Apr, 2026 | npm flowise |
Flowise: Public chatflow endpoints return unsanitized flowData including plaintext API keys, passwords, and credential IDs CVE-2026-41278, GHSA-w47f-j8rh-wx87 | High | 0.4% | 17 Apr, 2026 | npm flowise |
Flowise: Mass Assignment in DocumentStore Create Endpoint Leads to Cross-Workspace Object Takeover (IDOR) CVE-2026-41277, GHSA-3prp-9gf7-4rxx | High | 3.1% | 17 Apr, 2026 | npm flowise |
Complete Bypass of CVE-2026-24884 Patch via Git-Delivered Symlink Poisoning in compressing CVE-2026-40931, GHSA-4c3q-x735-j3r5 | High | 0.3% | 17 Apr, 2026 | npm compressing |
Auth0 Next.js SDK has Improper Proxy Cache Lookup CVE-2026-40155, GHSA-xq8m-7c5p-c2r6 | Medium | 0.2% | 17 Apr, 2026 | npm @auth0/nextjs-auth0 |
Claude Code: Insecure System-Wide Configuration Loading Enables Local Privilege Escalation on Windows CVE-2026-35603, GHSA-5cwg-9f6j-9jvx | Medium | 0.1% | 17 Apr, 2026 | npm @anthropic-ai/claude-code |
Malicious release: Malicious code in material-ui-plugin-cache-endpoint (npm) GHSA-gcvj-xqr7-rc54, MAL-2026-2926 | Malicious | Not scored | 17 Apr, 2026 | npm material-ui-plugin-cache-endpoint |
OpenClaw: Sandbox noVNC helper route exposed interactive browser session credentials CVE-2026-43575, GHSA-92jp-89mq-4374 | Critical | 0.4% | 17 Apr, 2026 | npm openclaw |
Malicious release: Malicious code in @indriver-poc/whisperwind (npm) MAL-2026-2851 | Malicious | Not scored | 17 Apr, 2026 | npm @indriver-poc/whisperwind |
Malicious release: Malicious code in value-slider (npm) GHSA-h8m3-pcfp-2jpw, MAL-2026-2850 | Malicious | Not scored | 17 Apr, 2026 | npm value-slider |
Malicious release: Malicious code in @than-xs/libsignal-node (npm) GHSA-5gf4-hf7c-gxxp, MAL-2026-2848 | Malicious | Not scored | 17 Apr, 2026 | npm @than-xs/libsignal-node |
Malicious release: Malicious code in @than1st/baileys (npm) GHSA-hcw6-3v33-4gw3, MAL-2026-2849 | Malicious | Not scored | 17 Apr, 2026 | npm @than1st/baileys |
Malicious release: Malicious code in eslint-plugin-totara (npm) GHSA-gvr8-64fv-6p2h, MAL-2026-2846 | Malicious | Not scored | 17 Apr, 2026 | npm eslint-plugin-totara |
Malicious release: Malicious code in node-red-contrib-yolo-object-detection (npm) GHSA-rxwg-h367-5qgm, MAL-2026-2845 | Malicious | Not scored | 17 Apr, 2026 | npm node-red-contrib-yolo-object-detection |
Malicious release: Malicious code in koa-v3 (npm) GHSA-975w-34c4-77hm, MAL-2026-2838 | Malicious | Not scored | 17 Apr, 2026 | npm koa-v3 |
Malicious release: Malicious code in express-security-policy (npm) GHSA-3hxc-wppf-m25r, MAL-2026-2828 | Malicious | Not scored | 17 Apr, 2026 | npm express-security-policy |
Malicious release: Malicious code in renovate-config-doctolib (npm) GHSA-8327-2h3c-rm8g, MAL-2026-2830 | Malicious | Not scored | 17 Apr, 2026 | npm renovate-config-doctolib |
Malicious release: Malicious code in paddle-internal-scripts (npm) MAL-2026-2829 | Malicious | Not scored | 17 Apr, 2026 | npm paddle-internal-scripts |
Malicious release: Malicious code in ing-web-v5 (npm) GHSA-5c9h-x827-2v9f, MAL-2026-2822 | Malicious | Not scored | 17 Apr, 2026 | npm ing-web-v5 |
Saltcorn: Open Redirect in `POST /auth/login` due to incomplete `is_relative_url` validation (backslash bypass) CVE-2026-42259, GHSA-f3g8-9xv5-77gv | Medium | 0.3% | 16 Apr, 2026 | npm @saltcorn/server |
Saltcorn: SQL Injection via Unparameterized Sync Endpoints (maxLoadedId) CVE-2026-41478, GHSA-jp74-mfrx-3qvh | Critical | 0.3% | 16 Apr, 2026 | npm @saltcorn/server |
Paperclip: Cross-tenant agent API key IDOR in `/agents/:id/keys` routes allows full victim-company compromise GHSA-3xx2-mqjm-hg9x | Critical | Not scored | 16 Apr, 2026 | npm @paperclipai/server |
Paperclip: Stored XSS via javascript: URLs in MarkdownBody — urlTransform override disables react-markdown sanitization GHSA-fpw4-p57j-hqmq | Medium | Not scored | 16 Apr, 2026 | npm @paperclipai/ui |
Paperclip: Approval decision attribution spoofing via client-controlled `decidedByUserId` in paperclip server GHSA-p7mm-r948-4q3q | Medium | Not scored | 16 Apr, 2026 | npm @paperclipai/server |
Paperclip: Cross-tenant agent API token minting via missing assertCompanyAccess on /api/agents/:id/keys GHSA-47wq-cj9q-wpmp | Critical | Not scored | 16 Apr, 2026 | npm @paperclipai/server |
Paperclip: OS Command Injection via Execution Workspace cleanupCommand CVE-2026-119713, GHSA-vr7g-88fq-vhq3 | Critical | 0.8% | 16 Apr, 2026 | npm @paperclipai/server |
Paperclip: codex_local inherited ChatGPT/OpenAI-connected Gmail and was able to send real email GHSA-gqqj-85qm-8qhf | High | Not scored | 16 Apr, 2026 | npm paperclipai |
Paperclip: Unauthenticated Access to Multiple API Endpoints in Authenticated Mode GHSA-xfqj-r5qw-8g4j | High | Not scored | 16 Apr, 2026 | npm @paperclipai/server |
Paperclip: Malicious skills able to exfiltrate and destroy all user data GHSA-w8hx-hqjv-vjcq | High | Not scored | 16 Apr, 2026 | npm @paperclipai/server |
Paperclip: Privilege Escalation via Agent-Controlled workspaceStrategy.provisionCommand Leading to OS Command Execution CVE-2026-41208, GHSA-265w-rf2w-cjh4 | High | 0.6% | 16 Apr, 2026 | npm @paperclipai/server |
Paperclip: Arbitrary File Read via Agent-Controlled adapterConfig.instructionsFilePath GHSA-3pw3-v88x-xj24 | Medium | Not scored | 16 Apr, 2026 | npm @paperclipai/shared |
OAuth 2.1 Provider: Unprivileged users can register OAuth clients CVE-2026-41427, GHSA-xr8f-h2gw-9xh6 | High | 0.2% | 16 Apr, 2026 | npm @better-auth/oauth-provider |
Budibase: Authentication Bypass via Unanchored Regex in Public Endpoint Matcher — Unauthenticated Access to Protected Endpoints CVE-2026-41428, GHSA-8783-3wgf-jggf | Critical | 0.4% | 16 Apr, 2026 | npm @budibase/backend-core |
Unsafe object property setter in mathjs CVE-2026-40897, GHSA-29qv-4j9f-fjw5 | High | 0.6% | 16 Apr, 2026 | npm mathjs |
Angular: SSRF via protocol-relative and backslash URLs in Angular Platform-Server CVE-2026-41423, GHSA-45q2-gjvg-7973 | High | 0.3% | 16 Apr, 2026 | npm @angular/platform-server |
protobufjs has an arbitrary code execution issue CVE-2026-41242, GHSA-xq3m-2v4x-88gg | Critical | 0.8% | 16 Apr, 2026 | npm protobufjs |
Flowise: resetPassword Authentication Bypass Vulnerability CVE-2026-41276, GHSA-f6hc-c5jr-878p | High | 6.9% | 16 Apr, 2026 | npm flowise |
Flowise: Cypher Injection in GraphCypherQAChain CVE-2026-41274, GHSA-28g4-38q8-3cwc | Critical | 0.5% | 16 Apr, 2026 | npm flowise npm flowise-components |
Flowise: Password Reset Link Sent Over Unsecured HTTP CVE-2026-41275, GHSA-x5w6-38gp-mrqh | High | 0.2% | 16 Apr, 2026 | npm flowise |
Flowise: Unauthenticated OAuth 2.0 Access Token Disclosure via Public Chatflow in Flowise CVE-2026-41273, GHSA-6f7g-v4pp-r667 | High | 0.3% | 16 Apr, 2026 | npm flowise |
Flowise: APIChain Prompt Injection SSRF in GET/POST API Chains CVE-2026-41271, GHSA-6r77-hqx7-7vw8 | High | 0.2% | 16 Apr, 2026 | npm flowise npm flowise-components |
Flowise: SSRF Protection Bypass (TOCTOU & Default Insecure) CVE-2026-41272, GHSA-2x8m-83vc-6wv4 | High | 0.3% | 16 Apr, 2026 | npm flowise npm flowise-components |
Flowise: SSRF Protection Bypass via Unprotected Built-in HTTP Modules in Custom Function Sandbox CVE-2026-41270, GHSA-xhmj-rg95-44hv | High | 0.2% | 16 Apr, 2026 | npm flowise npm flowise-components |