Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
StableLib Ed25519 Signature Malleability via Missing S < L Check GHSA-x3ff-w252-2g7j | Medium | Not scored | 01 Apr, 2026 | npm @stablelib/ed25519 |
SillyTavern: Incomplete IP validation in /api/search/visit allows SSRF via localhost and IPv6 CVE-2026-34526, GHSA-wm7j-m6jm-8797 | Medium | 0.2% | 01 Apr, 2026 | npm sillytavern |
SillyTavern: Path Traversal in `/api/chats/export` and `/api/chats/delete` allows arbitrary file read/delete within user data root CVE-2026-34524, GHSA-vprr-q85p-79mf | High | 0.6% | 01 Apr, 2026 | npm sillytavern |
SillyTavern: Path Traversal allows file existence oracle CVE-2026-34523, GHSA-525j-2hrj-m8fp | Medium | 0.5% | 01 Apr, 2026 | npm sillytavern |
SillyTavern has a path traversal in `/api/chats/import` allows arbitrary file write outside intended chat directory CVE-2026-34522, GHSA-xvww-xhx6-22pf | High | 0.4% | 01 Apr, 2026 | npm sillytavern |
Payload has Insufficient Filename Validation in Client-Upload Signed-URL Endpoints CVE-2026-34750, GHSA-frq9-7j6g-v74x | Medium | 0.4% | 01 Apr, 2026 | npm @payloadcms/storage-azure npm @payloadcms/storage-gcs npm @payloadcms/storage-r2 npm @payloadcms/storage-s3 |
Payload has a CSRF Protection Bypass in Authentication Flow CVE-2026-34749, GHSA-p6mr-xf3r-ghq4 | Medium | 0.1% | 01 Apr, 2026 | npm payload |
@payloadcms/next has Stored XSS in Admin Panel CVE-2026-34748, GHSA-mmxc-95ch-2j7c | High | 0.3% | 01 Apr, 2026 | npm @payloadcms/next |
Payload has an SQL Injection via Query Handling CVE-2026-34747, GHSA-7xxh-373w-35vg | High | 0.3% | 01 Apr, 2026 | npm payload |
Payload has Authenticated SSRF via Upload Functionality CVE-2026-34746, GHSA-6r7f-q7f5-wpx8 | High | 0.3% | 01 Apr, 2026 | npm payload |
Replicator deserializes untrusted user input CVE-2026-2265, GHSA-2gmp-34j9-fqjm | Medium | 0.4% | 01 Apr, 2026 | npm replicator |
Payload: Pre-Authentication Account Takeover via Parameter Injection in Password Recovery CVE-2026-34751, GHSA-hp5w-3hxx-vmwf | Critical | 0.3% | 01 Apr, 2026 | npm @payloadcms/graphql npm payload |
Malicious release: Malicious code in mcp-server-todo (npm) GHSA-hppm-xxp9-54h7, MAL-2026-2328 | Malicious | Not scored | 01 Apr, 2026 | npm mcp-server-todo |
Malicious release: Malicious code in bs58-basic (npm) GHSA-q3vj-r65j-q4x7, MAL-2026-2322 | Malicious | Not scored | 01 Apr, 2026 | npm bs58-basic |
Malicious release: Malicious code in raydium-bs58 (npm) GHSA-qm27-pj7f-f7jh, MAL-2026-2326 | Malicious | Not scored | 01 Apr, 2026 | npm raydium-bs58 |
Malicious release: Malicious code in ethersproject-wallet (npm) GHSA-wq8j-wv4x-xhh8, MAL-2026-2323 | Malicious | Not scored | 01 Apr, 2026 | npm ethersproject-wallet |
Malicious release: Malicious code in base-x-64 (npm) GHSA-x4xx-m9j7-vf6h, MAL-2026-2320 | Malicious | Not scored | 01 Apr, 2026 | npm base-x-64 |
Malicious release: Malicious code in base-or-engine (npm) GHSA-346p-r96j-6qc2, MAL-2026-2319 | Malicious | Not scored | 01 Apr, 2026 | npm base-or-engine |
Malicious release: Malicious code in @logcore/pino-pretty-logger (npm) GHSA-5rhm-2g6h-55jq, MAL-2026-2318 | Malicious | Not scored | 01 Apr, 2026 | npm @logcore/pino-pretty-logger |
Malicious release: Malicious code in jonas-prettier-logger (npm) GHSA-h9fw-29vc-6g89, MAL-2026-2325 | Malicious | Not scored | 01 Apr, 2026 | npm jonas-prettier-logger |
Malicious release: Malicious code in base58-engine (npm) GHSA-mv42-q6hf-h4c7, MAL-2026-2321 | Malicious | Not scored | 01 Apr, 2026 | npm base58-engine |
Malicious release: Malicious code in jellyfi-pino-pretty-logger (npm) GHSA-qxgw-5fgp-28w8, MAL-2026-2324 | Malicious | Not scored | 01 Apr, 2026 | npm jellyfi-pino-pretty-logger |
@tinacms/graphql's `FilesystemBridge` Path Validation Can Be Bypassed via Symlinks or Junctions CVE-2026-34604, GHSA-g9c2-gf25-3x67 | High | 0.4% | 01 Apr, 2026 | npm @tinacms/graphql |
@tinacms/graphql's Media Endpoints Can Escape the Media Root via Symlinks or Junctions CVE-2026-34603, GHSA-g87c-r2jp-293w | High | 0.4% | 01 Apr, 2026 | npm @tinacms/graphql |
xmldom: XML injection via unsafe CDATA serialization allows attacker-controlled markup insertion CVE-2026-34601, GHSA-wh4c-j3r5-mjhp | High | 0.5% | 01 Apr, 2026 | npm @xmldom/xmldom npm xmldom |
OpenClaw has a CWD `.env` environment variable injection which bypasses host-env policy and allows config takeover CVE-2026-41294, GHSA-8rh7-6779-cjqq | Critical | 0.1% | 01 Apr, 2026 | npm openclaw |
OpenClaw gateway exec allow-always over-trusts positional carrier executables CVE-2026-41380, GHSA-p4x4-2r7f-wjxg | High | 0.1% | 01 Apr, 2026 | npm openclaw |
OpenClaw Gateway `operator.write` can reach admin-only session reset via `chat.send` `/reset` CVE-2026-41371, GHSA-5r8f-96gm-5j6g | High | 0.3% | 01 Apr, 2026 | npm openclaw |
OpenClaw has a gateway exec allowlist allow-always bypass via unregistered /usr/bin/script wrapper CVE-2026-41390, GHSA-6pfc-6m7w-m8fx | High | 0.1% | 31 Mar, 2026 | npm openclaw |
OpenClaw's incomplete host env sanitization blocklist allows supply-chain redirection via package-manager env overrides CVE-2026-41387, GHSA-j7p2-qcwm-94v4 | High | 0.2% | 31 Mar, 2026 | npm openclaw |
OpenClaw SSRF guard misses four IPv6 special-use ranges CVE-2026-41361, GHSA-g86v-f9qv-rh6m | Medium | 0.2% | 31 Mar, 2026 | npm openclaw |
OpenClaw's Discord component interaction ingress skips guild/channel policy enforcement CVE-2026-41367, GHSA-jp4j-q5fc-58gv | Medium | 0.2% | 31 Mar, 2026 | npm openclaw |
OpenClaw: Gateway chat.send ACP-only provenance guard could be bypassed by client identity spoofing CVE-2026-41299, GHSA-6xg4-82hv-cp6f | High | 0.2% | 31 Mar, 2026 | npm openclaw |
OpenClaw: Gateway `operator.write` can reach admin-only persisted `verboseLevel` via `chat.send` `/verbose` CVE-2026-41344, GHSA-5h2w-qmfp-ggp6 | Medium | 0.2% | 31 Mar, 2026 | npm openclaw |
OpenClaw host-env blocklist missing `GIT_TEMPLATE_DIR` and `AWS_CONFIG_FILE` allows code execution via env override CVE-2026-41332, GHSA-m866-6qv5-p2fg | Medium | 0.1% | 31 Mar, 2026 | npm openclaw |
OpenClaw safeBins jq `$ENV` filter bypass allows environment variable disclosure CVE-2026-41368, GHSA-jccr-rrw2-vc8h | High | 0.2% | 31 Mar, 2026 | npm openclaw |
OpenClaw: Gateway WebSocket Denial of Service via unbounded pre-auth upgrades CVE-2026-41399, GHSA-f44p-c7w9-7xr7 | High | 0.3% | 31 Mar, 2026 | npm openclaw |
OpenClaw: Feishu extension resolveUploadInput bypasses file-system sandbox and allows arbitrary file reads via upload_image CVE-2026-41363, GHSA-qf48-qfv4-jjm9 | Medium | 0.3% | 31 Mar, 2026 | npm openclaw |
OpenClaw: Discord text `/approve` bypasses `channels.discord.execApprovals.approvers` and allows non-approvers to resolve pending exec approvals CVE-2026-41303, GHSA-98hh-7ghg-x6rq | High | 0.4% | 31 Mar, 2026 | npm openclaw |
OpenClaw: CLI Remote Onboarding Persists Unauthenticated Discovery Endpoint and Exfiltrates Gateway Credentials CVE-2026-41342, GHSA-3cw3-5vxw-g2h3 | High | 0.1% | 31 Mar, 2026 | npm openclaw |
OpenClaw: Voice-call Plivo V3 webhook replay key uses unsorted URL, allowing replay via query-parameter reordering CVE-2026-41395, GHSA-8689-gm9g-jgr6 | High | 0.1% | 31 Mar, 2026 | npm openclaw |
Nuxt OG Image vulnerable to Server-Side Request Forgery via user-controlled parameters GHSA-pqhr-mp3f-hrpp | Medium | Not scored | 31 Mar, 2026 | npm nuxt-og-image |
Claude SDK for TypeScript: Memory Tool Path Validation Allows Sandbox Escape to Sibling Directories CVE-2026-34451, GHSA-5474-4w2j-mq4c | Medium | 0.4% | 31 Mar, 2026 | npm @anthropic-ai/sdk |
Nuxt OG Image is vulnerable to reflected XSS via query parameter injection into HTML attributes CVE-2026-34405, GHSA-mg36-wvcr-m75h | Medium | 0.2% | 31 Mar, 2026 | npm nuxt-og-image |
Nuxt OG Image is vulnerable to Denial of Service via unbounded image dimensions CVE-2026-34404, GHSA-c7xp-q6q8-hg76 | Medium | 0.3% | 31 Mar, 2026 | npm nuxt-og-image |
lodash vulnerable to Code Injection via `_.template` imports key names CVE-2026-4800, GHSA-r5fr-rjxr-66jc | Critical | 2.8% | 31 Mar, 2026 | npm lodash npm lodash-amd npm lodash-es npm lodash.template |
Parser Server's streaming file download bypasses afterFind file trigger authorization BIT-parse-2026-34784, CVE-2026-34784, GHSA-hpm8-9qx6-jvwv | High | 0.4% | 31 Mar, 2026 | npm parse-server |
lodash vulnerable to prototype pollution via array-path bypass in `_.unset`, `_.omit`, and `_.pullAt CVE-2026-2950, GHSA-f23m-r3pf-42rh | Medium | 0.3% | 31 Mar, 2026 | npm lodash npm lodash-amd npm lodash-es npm lodash.omit +1 more |
Malicious release: Malicious code in @c8o/nimbus-core (npm) GHSA-6p89-h5mp-9cqp, MAL-2026-2314 | Malicious | Not scored | 31 Mar, 2026 | npm @c8o/nimbus-core |
Parse Server has a LiveQuery protected-field guard bypass via array-like logical operator value BIT-parse-2026-34595, CVE-2026-34595, GHSA-mmg8-87c5-jrc2 | Medium | 0.3% | 31 Mar, 2026 | npm parse-server |