Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
OpenClaw: Command hijacking via unsafe PATH handling (bootstrapping + node-host PATH overrides) CVE-2026-29610, GHSA-jqpq-mgvm-f9r6 | High | 0.5% | 18 Feb, 2026 | npm openclaw |
OpenClaw Google Chat shared-path webhook target ambiguity allowed cross-account policy-context misrouting CVE-2026-28469, GHSA-rq6g-px6m-c248 | High | 0.3% | 18 Feb, 2026 | npm clawdbot npm openclaw |
OpenClaw affected by cross-site request forgery (CSRF) through loopback browser mutation endpoints CVE-2026-26317, GHSA-3fqr-4cg8-h96q | High | 0.2% | 18 Feb, 2026 | npm clawdbot npm openclaw |
OpenClaw affected by denial of service via unbounded webhook request body buffering CVE-2026-28478, GHSA-q447-rj3r-2cgh | High | 0.5% | 18 Feb, 2026 | npm clawdbot npm openclaw |
OpenClaw affected by denial of service via unbounded URL-backed media fetch CVE-2026-29609, GHSA-j27p-hq53-9wgc | High | 0.5% | 18 Feb, 2026 | npm openclaw |
OpenClaw Slack: dmPolicy=open allowed any DM sender to run privileged slash commands CVE-2026-28392, GHSA-v773-r54f-q32w | High | 0.4% | 18 Feb, 2026 | npm openclaw |
OpenClaw exec approvals: safeBins could bypass stdin-only constraints via shell expansion CVE-2026-28463, GHSA-xvhf-x56f-2hpp | High | 0.2% | 18 Feb, 2026 | npm openclaw |
OpenClaw has a command injection in maintainer clawtributors updater CVE-2026-26323, GHSA-m7x8-2w3w-pr42 | High | 1.9% | 18 Feb, 2026 | npm openclaw |
OpenClaw has a path traversal in browser upload allows local file read CVE-2026-26329, GHSA-cv7m-c9jx-vg7q | High | 0.5% | 18 Feb, 2026 | npm openclaw |
OpenClaw allows unauthenticated discovery TXT records to steer routing and TLS pinning CVE-2026-26327, GHSA-pv58-549p-qh99 | High | 0.1% | 18 Feb, 2026 | npm openclaw |
OpenClaw Node host system.run rawCommand/command mismatch can bypass allowlist/approvals CVE-2026-26325, GHSA-h3f9-mjwj-w476 | High | 0.6% | 17 Feb, 2026 | npm openclaw |
OpenClaw has a SSRF guard bypass via full-form IPv4-mapped IPv6 (loopback / metadata reachable) CVE-2026-26324, GHSA-jrvc-8ff5-2f9f | High | 0.4% | 17 Feb, 2026 | npm openclaw |
OpenClaw Gateway tool allowed unrestricted gatewayUrl override CVE-2026-26322, GHSA-g6q9-8fvw-f7rf | High | 0.4% | 17 Feb, 2026 | npm openclaw |
OpenClaw has a local file disclosure via sendMediaFeishu in Feishu extension CVE-2026-26321, GHSA-8jpq-5h99-ff5r | High | 0.5% | 17 Feb, 2026 | npm openclaw |
OpenClaw macOS deep link confirmation truncation can conceal executed agent message CVE-2026-26320, GHSA-7q2j-c4q5-rm27 | High | 0.5% | 17 Feb, 2026 | npm openclaw |
OpenClaw is Missing Webhook Authentication in Telnyx Provider Allows Unauthenticated Requests CVE-2026-26319, GHSA-4hg8-92x6-h2f3 | High | 0.3% | 17 Feb, 2026 | npm openclaw |
OpenClaw has a Path Traversal in Plugin Installation CVE-2026-28447, GHSA-qrq5-wjgg-rvqw | High | 0.4% | 17 Feb, 2026 | npm openclaw |
OpenClaw authorization bypass: operator.write can resolve exec approvals via chat.send -> /approve CVE-2026-28473, GHSA-mqpw-46fh-299h | High | 0.3% | 17 Feb, 2026 | npm openclaw |
OpenClaw Twitch allowFrom is not enforced in optional plugin, unauthorized chat users can trigger agent pipeline CVE-2026-28448, GHSA-33rq-m5x2-fvgf | High | 0.5% | 17 Feb, 2026 | npm openclaw |
OpenClaw BlueBubbles webhook auth bypass via loopback proxy trust CVE-2026-26316, GHSA-pchc-86f6-8758 | High | 0.4% | 17 Feb, 2026 | npm @openclaw/bluebubbles npm openclaw |
OpenClaw optional voice-call plugin: webhook verification may be bypassed behind certain proxy configurations CVE-2026-28465, GHSA-3m3q-x3gj-f79x | High | 0.4% | 17 Feb, 2026 | npm @clawdbot/voice-call npm @openclaw/voice-call |
OpenClaw's unauthenticated Nostr profile HTTP endpoints allow remote profile/config tampering CVE-2026-28450, GHSA-mv9j-6xhh-g383 | High | 0.4% | 17 Feb, 2026 | npm openclaw |
fast-xml-parser affected by DoS through entity expansion in DOCTYPE (no expansion limit) CVE-2026-26278, GHSA-jmr7-xgp7-cmfj | High | 0.9% | 17 Feb, 2026 | npm fast-xml-parser |
OpenClaw has a Telegram webhook request forgery (missing `channels.telegram.webhookSecret`) → auth bypass CVE-2026-25474, GHSA-mp5h-m6qj-6292 | High | 0.2% | 17 Feb, 2026 | npm openclaw |
OpenClaw has a webhook auth bypass when gateway is behind a reverse proxy (loopback remoteAddress trust) CVE-2026-29613, GHSA-xc7w-v5x6-cc87 | High | 0.5% | 17 Feb, 2026 | npm openclaw |
OpenClaw affected by SSRF in Image Tool Remote Fetch GHSA-56f2-hvwg-5743 | High | Not scored | 17 Feb, 2026 | npm openclaw |
OpenClaw's Browser Relay /cdp websocket is missing auth which could allow cross-tab cookie access CVE-2026-28458, GHSA-mr32-vwc2-5j6h | High | 0.4% | 17 Feb, 2026 | npm moltbot npm openclaw |
OpenClaw has an arbitrary transcript path file write via gateway sessionFile CVE-2026-28459, GHSA-64qx-vpxx-mvqf | High | 0.4% | 17 Feb, 2026 | npm openclaw |
OpenClaw Hook Session Key Override Enables Targeted Cross-Session Routing GHSA-hv93-r4j3-q65f | High | Not scored | 17 Feb, 2026 | npm openclaw |
CediPay Affected by Improper Input Validation in Payment Processing CVE-2026-26063, GHSA-wvr6-395c-5pxr | High | 0.3% | 12 Feb, 2026 | npm cedipay-core |
next-mdx-remote affected by arbitrary code execution in React server-side rendering of untrusted MDX content CVE-2026-0969, GHSA-g4xw-jxrg-5f6m | High | 0.6% | 12 Feb, 2026 | npm next-mdx-remote |
Cube Core is vulnerable to privilege escalation via a specially crafted request CVE-2026-25958, GHSA-v226-32c7-x2v7 | High | 0.4% | 09 Feb, 2026 | npm @cubejs-backend/server-core |
FUXA Affected by a Path Traversal Sanitization Bypass CVE-2026-25951, GHSA-68m5-5w2h-h837 | High | 1.4% | 09 Feb, 2026 | npm fuxa-server |
Axios is Vulnerable to Denial of Service via __proto__ Key in mergeConfig CVE-2026-25639, GHSA-43fc-jf86-j433 | High | 2.8% | 09 Feb, 2026 | npm axios |
jsonpath has Arbitrary Code Injection via Unsafe Evaluation of JSON Path Expressions CVE-2026-1615, GHSA-87r5-mp6g-5w5j | High | 1.2% | 09 Feb, 2026 | npm jsonpath |
AdonisJS vulnerable to Denial of Service (DoS) via Unrestricted Memory Buffering in PartHandler during File Type Detection CVE-2026-25762, GHSA-xx9g-fh25-4q64 | High | 0.5% | 06 Feb, 2026 | npm @adonisjs/bodyparser |
AdonisJS multipart body parsing has Prototype Pollution issue CVE-2026-25754, GHSA-f5x2-vj4h-vg4c | High | 0.4% | 06 Feb, 2026 | npm @adonisjs/bodyparser |
Claude Code has Sandbox Escape via Persistent Configuration Injection in settings.json CVE-2026-25725, GHSA-ff64-7w26-62rf | High | 0.5% | 06 Feb, 2026 | npm @anthropic-ai/claude-code |
Claude Code Vulnerable to Command Injection via Piped sed Command Bypasses File Write Restrictions CVE-2026-25723, GHSA-mhg7-666j-cqg4 | High | 0.4% | 06 Feb, 2026 | npm @anthropic-ai/claude-code |
Claude Code Vulnerable to Command Injection via Directory Change Bypasses Write Protection CVE-2026-25722, GHSA-66q4-vfjg-2qhh | High | 0.5% | 06 Feb, 2026 | npm @anthropic-ai/claude-code |
OpenClaw vulnerable to Unauthenticated Local RCE via WebSocket config.apply CVE-2026-25593, GHSA-g55j-c2v4-pjcg | High | 0.7% | 04 Feb, 2026 | npm openclaw |
@modelcontextprotocol/sdk has cross-client data leak via shared server/transport instance reuse CVE-2026-25536, GHSA-345p-7cg4-v4c7 | High | 0.3% | 04 Feb, 2026 | npm @modelcontextprotocol/sdk |
godot-mcp has Command Injection via unsanitized projectPath CVE-2026-25546, GHSA-8jx2-rhfh-q928 | High | 1.0% | 04 Feb, 2026 | npm @coding-solo/godot-mcp |
Apollo Serve vulnerable to Denial of Service with `startStandaloneServer` CVE-2026-23897, GHSA-mp6q-xf9x-fwf7 | High | 0.7% | 04 Feb, 2026 | npm @apollo/server npm apollo-server |
n8n Vulnerable to Arbitrary File Write on Remote Systems via SSH Node CVE-2026-25055, GHSA-m82q-59gv-mcr9 | High | 1.9% | 04 Feb, 2026 | npm n8n |
n8n Has Stored Cross-site Scripting via Markdown Rendering in Workflow UI CVE-2026-25054, GHSA-qpq4-pw7f-pp8w | High | 0.2% | 04 Feb, 2026 | npm n8n |
n8n's Improper CSP Enforcement in Webhook Responses May Allow Stored XSS CVE-2026-25051, GHSA-825q-w924-xhgx | High | 0.3% | 04 Feb, 2026 | npm n8n |
n8n's Unsafe Buffer Allocation Allows In-Process Memory Disclosure in Task Runner CVE-2025-61917, GHSA-49mx-fj45-q3p6 | High | 0.4% | 04 Feb, 2026 | npm n8n |
Qwik City CSRF protection middleware does not work properly for content type header with parameters (eg. multipart/form-data) CVE-2026-25155, GHSA-vm6g-8r4h-22x8 | High | 0.1% | 03 Feb, 2026 | npm @builder.io/qwik-city |
Claude Code has a Command Injection in find Command Bypasses User Approval Prompt CVE-2026-24887, GHSA-qgqw-h4xq-7w8w | High | 0.6% | 03 Feb, 2026 | npm @anthropic-ai/claude-code |