Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
OpenClaw: diffs viewer misclassifies proxied remote requests as loopback when `allowRemoteViewer` is disabled CVE-2026-41403, GHSA-3xv9-89fm-7h4r | Medium | 0.3% | 03 Apr, 2026 | npm openclaw |
OpenClaw: Discord Slash Commands Bypass Group DM Channel Allowlist CVE-2026-41348, GHSA-rvvf-6vh3-9j43 | Low | 0.2% | 03 Apr, 2026 | npm openclaw |
OpenClaw: macOS Tailnet DNS Spoofing & Credential Exfiltration CVE-2026-41393, GHSA-q9w8-cf67-r238 | High | 0.1% | 03 Apr, 2026 | npm openclaw |
OpenClaw: Telegram legacy allowFrom migration fans default-account trust into all named accounts CVE-2026-41340, GHSA-f693-58pc-2gfr | Medium | 0.3% | 03 Apr, 2026 | npm openclaw |
OpenClaw: Tlon Startup Migration Rehydrates Empty-Array Revocations From File Config CVE-2026-41388, GHSA-3pm9-5j7m-59vc | Medium | 0.3% | 03 Apr, 2026 | npm openclaw |
OpenClaw: Unbound bootstrap setup codes allow privilege escalation during pairing CVE-2026-41386, GHSA-gg9v-mgcp-v6m7 | Critical | 0.3% | 03 Apr, 2026 | npm openclaw |
OpenClaw: Node browser proxy `allowProfiles` bypass through persistent profile mutation and runtime profile selection CVE-2026-41353, GHSA-h5hg-h7rr-gpf3 | High | 0.3% | 03 Apr, 2026 | npm openclaw |
OpenClaw: Discord voice manager bypasses channel-level member access allowlist CVE-2026-41381, GHSA-cqgw-44wg-44rf | Medium | 0.2% | 03 Apr, 2026 | npm openclaw |
OpenClaw: Telegram audio preflight transcription enables resource consumption by unauthorized senders CVE-2026-41331, GHSA-m6fx-m8hc-572m | Medium | 0.3% | 03 Apr, 2026 | npm openclaw |
OpenClaw: Paired node escalates to gateway RCE via unrestricted node.event agent dispatch CVE-2026-41378, GHSA-gjm7-hw8f-73rq | High | 0.4% | 03 Apr, 2026 | npm openclaw |
OpenClaw: Sandbox escape via TOCTOU race in remote FS bridge readFile CVE-2026-41296, GHSA-9p3r-hh9g-5cmg | Critical | 0.2% | 03 Apr, 2026 | npm openclaw |
OpenClaw: Voice-call still parses large WebSocket frames before start validation (Incomplete fix for CVE-2026-32062) CVE-2026-41400, GHSA-2w79-r9g8-wmcr | Medium | 0.5% | 03 Apr, 2026 | npm openclaw |
OpenClaw: Gateway `device.token.rotate` does not terminate active WebSocket sessions after credential rotation CVE-2026-41356, GHSA-rfqg-qgf8-xr9x | Low | 0.2% | 03 Apr, 2026 | npm openclaw |
OpenClaw: Fake DeviceToken Bypasses Shared Auth Rate Limiting CVE-2026-41333, GHSA-6p8r-6m93-557f | Medium | 0.4% | 03 Apr, 2026 | npm openclaw |
OpenClaw: Host exec environment sanitization misses package, registry, Docker, compiler, and TLS override variables CVE-2026-41369, GHSA-cg7q-fg22-4g98 | High | 0.3% | 03 Apr, 2026 | npm openclaw |
OpenClaw: Path traversal via inbound channel attachment path in ACP dispatch allows arbitrary file read CVE-2026-41370, GHSA-58q2-7r52-jq62 | High | 0.4% | 03 Apr, 2026 | npm openclaw |
OpenClaw: Incomplete scope-clearing fix allows operator.admin escalation via trusted-proxy auth mode CVE-2026-41404, GHSA-g374-mggx-p6xc | High | 0.3% | 03 Apr, 2026 | npm openclaw |
OpenClaw: Agentic Consent Bypass — LLM Agent Can Silently Disable Exec Approval via `config.patch` CVE-2026-41349, GHSA-v3qc-wrwx-j3pw | High | 0.5% | 03 Apr, 2026 | npm openclaw |
OpenClaw Has a Gateway Control Interface Information Disclosure Vulnerability CVE-2026-41335, GHSA-hr8g-2q7x-3f4w | Medium | 0.3% | 03 Apr, 2026 | npm openclaw |
OpenClaw: Sandbox file operations use check-then-act, bypassing fd-based TOCTOU defenses CVE-2026-41338, GHSA-rm5c-4rmf-vvhw | Medium | 0.1% | 03 Apr, 2026 | npm openclaw |
OpenClaw: Image pixel-limit guard can fail open on sips and allow decompression-bomb DoS CVE-2026-41334, GHSA-w85g-3h6x-4xh2 | High | 0.3% | 03 Apr, 2026 | npm openclaw |
OpenClaw: Incomplete host-env-security-policy allows untrusted model to substitute compiler binaries via env overrides CVE-2026-41373, GHSA-g8xp-qx39-9jq9 | High | 0.1% | 03 Apr, 2026 | npm openclaw |
OpenClaw: Device-Paired Node Skips Node Scope Gate → Host RCE.md CVE-2026-41352, GHSA-xj9w-5r6q-x6v4 | High | 0.5% | 03 Apr, 2026 | npm openclaw |
OpenClaw: Telnyx Webhook Replay Detection Bypass via Base64 Signature Re-encoding CVE-2026-41351, GHSA-37v6-fxx8-xjmx | Medium | 0.3% | 03 Apr, 2026 | npm openclaw |
OpenClaw: Host exec environment overrides miss proxy, TLS, Docker, and Git TLS controls CVE-2026-41330, GHSA-9gp8-hjxr-6f34 | Medium | 0.1% | 03 Apr, 2026 | npm openclaw |
OpenClaw runs Discord audio preflight transcription before member authorization CVE-2026-41374, GHSA-hhff-fj5f-qg48 | Medium | 0.5% | 03 Apr, 2026 | npm openclaw |
OpenClaw: HTTP operator endpoints lack browser-origin validation in trusted-proxy mode CVE-2026-41347, GHSA-mhr7-2xmv-4c4q | Low | 0.1% | 03 Apr, 2026 | npm openclaw |
OpenClaw: MS Teams webhook parses body before JWT validation, enabling unauthenticated resource exhaustion CVE-2026-41405, GHSA-p464-m8x6-vhv8 | High | 0.5% | 03 Apr, 2026 | npm openclaw |
OpenClaw: Self-Whitelisting in appendLocalMediaParentRoots Allows Arbitrary File Read & Credential Exfiltration CVE-2026-41366, GHSA-57gh-m6rq-54cf | High | 0.2% | 03 Apr, 2026 | npm openclaw |
OpenClaw: Media download follows cross-origin redirects with Authorization headers intact CVE-2026-41345, GHSA-68v4-hmwv-f43h | Medium | 0.3% | 03 Apr, 2026 | npm openclaw |
OpenClaw: OpenShell Mirror Sync — Sandbox Escape via Unrestricted File Sync + Symlink Traversal CVE-2026-41397, GHSA-cwf8-44x6-32c2 | High | 0.5% | 03 Apr, 2026 | npm openclaw |
OpenClaw: Workspace `.env` can override the bundled plugin trust root CVE-2026-41396, GHSA-qcj9-wwgw-6gm8 | High | 0.1% | 03 Apr, 2026 | npm openclaw |
Electron: Context Isolation bypass via contextBridge VideoFrame transfer CVE-2026-34780, GHSA-jfqg-hf23-qpw2 | High | 0.3% | 03 Apr, 2026 | npm electron |
Electron: AppleScript injection in app.moveToApplicationsFolder on macOS CVE-2026-34779, GHSA-5rqw-r77c-jp79 | High | 0.2% | 03 Apr, 2026 | npm electron |
Electron: Service worker can spoof executeJavaScript IPC replies CVE-2026-34778, GHSA-xj5x-m3f3-5x3h | Medium | 0.1% | 03 Apr, 2026 | npm electron |
Electron: Incorrect origin passed to permission request handler for iframe requests CVE-2026-34777, GHSA-r5p7-gp4j-qhrx | Medium | 0.1% | 03 Apr, 2026 | npm electron |
Electron: Out-of-bounds read in second-instance IPC on macOS and Linux CVE-2026-34776, GHSA-3c8v-cfp5-9885 | Medium | 0.2% | 03 Apr, 2026 | npm electron |
Electron: nodeIntegrationInWorker not correctly scoped in shared renderer processes CVE-2026-34775, GHSA-xwr5-m59h-vwqr | Critical | 0.3% | 03 Apr, 2026 | npm electron |
Electron: Use-after-free in offscreen child window paint callback CVE-2026-34774, GHSA-532v-xpq5-8h95 | High | 0.5% | 03 Apr, 2026 | npm electron |
Electron: Registry key path injection in app.setAsDefaultProtocolClient on Windows CVE-2026-34773, GHSA-mwmh-mq4g-g6gr | High | 0.2% | 03 Apr, 2026 | npm electron |
Electron: Use-after-free in download save dialog callback CVE-2026-34772, GHSA-9w97-2464-8783 | High | 0.2% | 03 Apr, 2026 | npm electron |
Electron: Use-after-free in WebContents fullscreen, pointer-lock, and keyboard-lock permission callbacks CVE-2026-34771, GHSA-8337-3p73-46f4 | High | 0.3% | 03 Apr, 2026 | npm electron |
Electron: Use-after-free in PowerMonitor on Windows and macOS CVE-2026-34770, GHSA-jjp3-mq3x-295m | High | 0.2% | 03 Apr, 2026 | npm electron |
Electron: Renderer command-line switch injection via undocumented commandLineSwitches webPreference CVE-2026-34769, GHSA-9wfr-w7mm-pc7f | High | 0.3% | 03 Apr, 2026 | npm electron |
Electron: Unquoted executable path in app.setLoginItemSettings on Windows CVE-2026-34768, GHSA-jfqx-fxh3-c62j | High | 0.1% | 03 Apr, 2026 | npm electron |
Electron: HTTP Response Header Injection in custom protocol handlers and webRequest CVE-2026-34767, GHSA-4p4r-m79c-wq3v | Medium | 0.2% | 03 Apr, 2026 | npm electron |
Electron: USB device selection not validated against filtered device list CVE-2026-34766, GHSA-9899-m83m-qhpj | Medium | 0.2% | 03 Apr, 2026 | npm electron |
TeleJSON: DOM XSS via unsanitised constructor name in `new Function()` CVE-2026-47099, GHSA-ccgf-5rwj-j3hv | Low | 0.4% | 02 Apr, 2026 | npm telejson |
OpenClaw: Security Scan Failure Does Not Block Plugin Installation (Fail-Open) CVE-2026-41377, GHSA-cwq8-6f96-g3q4 | Medium | 0.2% | 02 Apr, 2026 | npm openclaw |
OpenClaw: SSH sandbox tar upload follows symlinks, enabling arbitrary file write on remote host CVE-2026-41364, GHSA-fv94-qvg8-xqpw | High | 0.5% | 02 Apr, 2026 | npm openclaw |