Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
OpenClaw: SSRF via Unguarded `fetch()` in Marketplace Plugin Download and Ollama Model Discovery CVE-2026-41302, GHSA-9q7v-8mr7-g23p | Medium | 0.2% | 02 Apr, 2026 | npm openclaw |
OpenClaw: SSH-based sandbox backends pass unsanitized process.env to child processes CVE-2026-41357, GHSA-j9pv-rrcj-6pfx | Medium | 0.2% | 02 Apr, 2026 | npm openclaw |
OpenClaw: MSTeams thread history bypasses sender allowlist via Graph API CVE-2026-41365, GHSA-chfm-xgc4-47rj | Medium | 0.2% | 02 Apr, 2026 | npm openclaw |
OpenClaw: LINE webhook handler lacks shared pre-auth concurrency budget before signature verification CVE-2026-41343, GHSA-qcc3-jqwp-5vh2 | Medium | 0.5% | 02 Apr, 2026 | npm openclaw |
OpenClaw: Matrix thread root and reply context bypass sender allowlist CVE-2026-41376, GHSA-rg8m-3943-vm6q | Low | 0.2% | 02 Apr, 2026 | npm openclaw |
OpenClaw: Workspace `.env` can override the bundled hooks root and load attacker hook code CVE-2026-41336, GHSA-3qpv-xf3v-mm45 | High | 0.1% | 02 Apr, 2026 | npm openclaw |
OpenClaw: Feishu thread history and quoted messages bypass sender allowlist CVE-2026-41406, GHSA-877v-w3f5-3pcq | Medium | 0.2% | 02 Apr, 2026 | npm openclaw |
OpenClaw: Heartbeat context inheritance bypasses sandbox via senderIsOwner escalation CVE-2026-41329, GHSA-g5cg-8x5w-7jpm | Critical | 0.3% | 02 Apr, 2026 | npm openclaw |
OpenClaw: Zalo webhook replay cache cross-target messageId scope bypass CVE-2026-41402, GHSA-hhq4-97c2-p447 | Low | 0.3% | 02 Apr, 2026 | npm openclaw |
OpenClaw Nostr privateKey config redaction bypass leaks plaintext signing key via config.get CVE-2026-41385, GHSA-jjw7-3vjf-fg5j | High | 0.2% | 02 Apr, 2026 | npm openclaw |
OpenClaw: PIP_INDEX_URL and UV_INDEX_URL bypass host exec env sanitization and redirect Python package-index traffic CVE-2026-41391, GHSA-7ggg-pvrf-458v | High | 0.1% | 02 Apr, 2026 | npm openclaw |
OpenClaw: Voice-call Plivo replay mutates in-process callback origin before replay rejection CVE-2026-41337, GHSA-89r3-6x4j-v7wf | Medium | 0.2% | 02 Apr, 2026 | npm openclaw |
OpenClaw: Unauthenticated plugin-auth HTTP routes receive operator runtime scopes CVE-2026-41394, GHSA-mhgq-xpfq-6r66 | High | 0.3% | 02 Apr, 2026 | npm openclaw |
fast-jwt: Incomplete fix for CVE-2023-48223: JWT Algorithm Confusion via Whitespace-Prefixed RSA Public Key CVE-2026-34950, GHSA-mvf2-f6gm-w987 | Critical | 0.3% | 02 Apr, 2026 | npm fast-jwt |
OpenClaw's complex interpreter pipelines could skip exec script preflight validation CVE-2026-34425, GHSA-fvx6-pj3r-5q4q | Medium | 0.3% | 02 Apr, 2026 | npm openclaw |
Axios supply chain attack - dependency in @lightdash/cli may resolve to compromised axios versions GHSA-3hfp-gqgh-xc5g | Critical | Not scored | 02 Apr, 2026 | npm @lightdash/cli |
Axios npm Supply Chain Incident Impacting @usebruno/cli CVE-2026-34841, GHSA-658g-p7jg-wx5g | Critical | 0.2% | 02 Apr, 2026 | npm @usebruno/cli |
Malicious release: Malicious code in exprrrress (npm) MAL-2026-2443 | Malicious | Not scored | 02 Apr, 2026 | npm exprrrress |
Malicious release: Malicious code in expreeeess (npm) MAL-2026-2442 | Malicious | Not scored | 02 Apr, 2026 | npm expreeeess |
Signal K Server: Arbitrary Prototype Read via `from` Field Bypass CVE-2026-35038, GHSA-qh3j-mrg8-f234 | Low | 0.3% | 02 Apr, 2026 | npm signalk-server |
Signal K Server: OAuth Authorization Code Theft via Unvalidated Host Header in OIDC Flow CVE-2026-34083, GHSA-cxj8-ggf2-p57c | Medium | 0.1% | 02 Apr, 2026 | npm signalk-server |
Signal K Server: Unauthenticated Source Priorities Manipulation CVE-2026-33951, GHSA-gfmv-vh34-h2x5 | Medium | 0.3% | 02 Apr, 2026 | npm signalk-server |
Signal K Server: Privilege Escalation by Admin Role Injection via /enableSecurity CVE-2026-33950, GHSA-x8hc-fqv3-7gwf | Critical | 0.4% | 02 Apr, 2026 | npm signalk-server |
Malicious release: Malicious code in expeewas (npm) MAL-2026-2439 | Malicious | Not scored | 02 Apr, 2026 | npm expeewas |
Malicious release: Malicious code in pro-express (npm) MAL-2026-2445 | Malicious | Not scored | 02 Apr, 2026 | npm pro-express |
Malicious release: Malicious code in expirs (npm) MAL-2026-2441 | Malicious | Not scored | 02 Apr, 2026 | npm expirs |
Malicious release: Malicious code in exaprse (npm) MAL-2026-2437 | Malicious | Not scored | 02 Apr, 2026 | npm exaprse |
Malicious release: Malicious code in exszpe3szs (npm) MAL-2026-2444 | Malicious | Not scored | 02 Apr, 2026 | npm exszpe3szs |
Malicious release: Malicious code in 4xperss (npm) MAL-2026-2435 | Malicious | Not scored | 02 Apr, 2026 | npm 4xperss |
Malicious release: Malicious code in expeedsxs (npm) MAL-2026-2438 | Malicious | Not scored | 02 Apr, 2026 | npm expeedsxs |
Malicious release: Malicious code in 4exepreds (npm) MAL-2026-2434 | Malicious | Not scored | 02 Apr, 2026 | npm 4exepreds |
Malicious release: Malicious code in eixp4ressz (npm) MAL-2026-2436 | Malicious | Not scored | 02 Apr, 2026 | npm eixp4ressz |
Malicious release: Malicious code in experedzss (npm) MAL-2026-2440 | Malicious | Not scored | 02 Apr, 2026 | npm experedzss |
Malicious release: Malicious code in bytefrontier-sdk (npm) GHSA-98jh-wxvx-v78v, MAL-2026-2424 | Malicious | Not scored | 02 Apr, 2026 | npm bytefrontier-sdk |
Malicious release: Malicious code in vv-ftend-api (npm) GHSA-xprf-4c78-3wc4, MAL-2026-2428 | Malicious | Not scored | 02 Apr, 2026 | npm vv-ftend-api |
fast-filesystem-mcp is vulnerable to command injection through handleGetDiskUsage function CVE-2026-5327, GHSA-5226-3rvg-hp4x | Low | 1.2% | 02 Apr, 2026 | npm fast-filesystem-mcp |
Malicious release: Malicious code in bytefrontier-tracker (npm) GHSA-xhp5-mvx8-6qh4, MAL-2026-2425 | Malicious | Not scored | 02 Apr, 2026 | npm bytefrontier-tracker |
Malicious release: Malicious code in partner-tracker (npm) GHSA-49v3-3255-4m4h, MAL-2026-2426 | Malicious | Not scored | 02 Apr, 2026 | npm partner-tracker |
Malicious release: Malicious code in bytefrontier-partner (npm) GHSA-9f9x-w4j9-p76g, MAL-2026-2423 | Malicious | Not scored | 02 Apr, 2026 | npm bytefrontier-partner |
Malicious release: Malicious code in bytefrontier-api (npm) GHSA-v8qw-q287-ggh6, MAL-2026-2422 | Malicious | Not scored | 02 Apr, 2026 | npm bytefrontier-api |
Malicious release: Malicious code in partner-tracker-api (npm) GHSA-2fx9-x528-r27g, MAL-2026-2427 | Malicious | Not scored | 02 Apr, 2026 | npm partner-tracker-api |
Malicious release: Malicious code in vv-ftend-core (npm) GHSA-wv4c-3rwx-9p9x, MAL-2026-2429 | Malicious | Not scored | 02 Apr, 2026 | npm vv-ftend-core |
Malicious release: Malicious code in @mgcrae/pino-pretty-logger (npm) GHSA-vm8g-5xgx-c5jx, MAL-2026-2421 | Malicious | Not scored | 02 Apr, 2026 | npm @mgcrae/pino-pretty-logger |
Malicious release: Malicious code in express-session-js (npm) GHSA-2847-rm77-74wh, MAL-2026-2419 | Malicious | Not scored | 02 Apr, 2026 | npm express-session-js |
Malicious release: Malicious code in @_wnpm/wnpm-cli (npm) MAL-2026-2420 | Malicious | Not scored | 02 Apr, 2026 | npm @_wnpm/wnpm-cli |
a11y-mcp: Server-Side Request Forgery (SSRF) vulnerability in A11yServer function CVE-2026-5323, GHSA-prmx-7v35-7q82 | Low | 0.1% | 02 Apr, 2026 | npm a11y-mcp |
mcp-handler has a tool response leak across concurrent client sessions ('Race Condition') GHSA-w2fm-25vw-vh7f | High | Not scored | 01 Apr, 2026 | npm mcp-handler |
NocoBase Has SQL Injection via template variable substitution in workflow SQL node CVE-2026-34825, GHSA-vx58-fwwq-5g8j | High | 0.4% | 01 Apr, 2026 | npm @nocobase/plugin-workflow-sql |
Haraka affected by DoS via `__proto__` email header CVE-2026-34752, GHSA-xph3-r2jf-4vp3 | High | 0.4% | 01 Apr, 2026 | npm Haraka |
dbgate-web: Stored XSS in applicationIcon leads to potential RCE in Electron due to unsafe renderer configuration CVE-2026-34725, GHSA-35xm-qvjg-8m42 | High | 0.2% | 01 Apr, 2026 | npm dbgate-web |