Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Happy DOM ECMAScriptModuleCompiler: unsanitized export names are interpolated as executable code CVE-2026-33943, GHSA-6q6h-j7hj-3r64 | Critical | 0.6% | 26 Mar, 2026 | npm happy-dom |
Handlebars.js has Prototype Pollution Leading to XSS through Partial Template Injection CVE-2026-33916, GHSA-2qvq-rjwj-gvw9 | Medium | 0.3% | 26 Mar, 2026 | npm handlebars |
Forge has a basicConstraints bypass in its certificate chain verification (RFC 5280 violation) CVE-2026-33896, GHSA-2328-f5f3-gj25 | Critical | 0.4% | 26 Mar, 2026 | npm node-forge |
Forge has signature forgery in Ed25519 due to missing S > L check CVE-2026-33895, GHSA-q67f-28xg-22rw | High | 0.5% | 26 Mar, 2026 | npm node-forge |
node-forge RSA PKCS#1 v1.5 signature verification accepts extra nested DigestAlgorithm elements CVE-2026-33894, CVE-2026-85393, GHSA-86w9-cpqp-85rv, GHSA-ppp5-5v6c-4jwp | High | 0.5% | 26 Mar, 2026 | npm node-forge |
Forge has Denial of Service via Infinite Loop in BigInteger.modInverse() with Zero Input CVE-2026-33891, GHSA-5m6q-g25r-mvwx | High | 0.6% | 26 Mar, 2026 | npm node-forge |
Apollo Server: Browser bug allows for bypass of XS-Search (read-only Cross-Site Request Forgery) prevention GHSA-9q82-xgwf-vj6h | Medium | Not scored | 26 Mar, 2026 | npm @apollo/server npm apollo-server-core |
OpenClaw: Symlink Traversal via IDENTITY.md appendFile in agents.create/update (Incomplete Fix for CVE-2026-32013) CVE-2026-35632, GHSA-7xr2-q9vf-x4r5 | Medium | 0.4% | 26 Mar, 2026 | npm openclaw |
OpenClaw: Image Tool `tools.fs.workspaceOnly` Bypass via Sandbox Bridge Mounts CVE-2026-35658, GHSA-cfp9-w5v9-3q4h | Medium | 0.3% | 26 Mar, 2026 | npm openclaw |
OpenClaw's Conflicting Tool Identity Hints Bypass Dangerous-Tool Prompting CVE-2026-35655, GHSA-74wf-h43j-vvmj | Medium | 0.2% | 26 Mar, 2026 | npm openclaw |
OpenClaw Bypasses DM Policy Separation via Synology Chat Webhook Path Collision CVE-2026-35635, GHSA-rqp8-q22p-5j9q | Medium | 0.3% | 26 Mar, 2026 | npm openclaw |
OpenClaw leaf subagents can bypass controlScope restrictions to send messages to child sessions CVE-2026-35662, GHSA-x2cm-hg9c-mf5w | Medium | 0.2% | 26 Mar, 2026 | npm openclaw |
OpenClaw: Forwarding header spoofing bypasses gateway.trustedProxies origin detection CVE-2026-35656, GHSA-844j-xrrq-wgh4 | Medium | 0.3% | 26 Mar, 2026 | npm openclaw |
OpenClaw Gateway: RCE and Privilege Escalation from operator.pairing to operator.admin via device.pair.approve CVE-2026-35639, GHSA-hf68-49fm-59cq | Critical | 0.5% | 26 Mar, 2026 | npm openclaw |
OpenClaw: Google Chat app-url webhook auth accepted non-deployment add-on principals CVE-2026-35622, GHSA-mp66-rf4f-mhh8 | Medium | 0.3% | 26 Mar, 2026 | npm openclaw |
OpenClaw: Nextcloud Talk room allowlist matched colliding room names instead of stable room tokens CVE-2026-35624, GHSA-xhq5-45pm-2gjr | Low | 0.3% | 26 Mar, 2026 | npm openclaw |
OpenClaw: Tlon settings empty-allowlist reconciliation bypassed intended revocation CVE-2026-35649, GHSA-pw7h-9g6p-c378 | Medium | 0.3% | 26 Mar, 2026 | npm openclaw |
OpenClaw: Tlon cite expansion happens before channel and DM authorization is complete CVE-2026-35637, GHSA-vfg3-pqpq-93m4 | Medium | 0.3% | 26 Mar, 2026 | npm openclaw |
OpenClaw's mutating internal ACP chat commands missed operator.admin scope enforcement CVE-2026-35631, GHSA-3w6x-gv34-mqpf | High | 0.2% | 26 Mar, 2026 | npm openclaw |
OpenClaw: Mattermost callback dispatch allowed non-allowlisted sender actions CVE-2026-35652, GHSA-8883-9w57-vwv6 | Medium | 0.4% | 26 Mar, 2026 | npm openclaw |
OpenClaw Exposes Credentials Embedded in baseUrl Fields via config.get and channels.status CVE-2026-35644, GHSA-ppwq-6v66-5m6j | High | 0.2% | 26 Mar, 2026 | npm openclaw |
OpenClaw may have stale policy enforcement for queued node actions CVE-2026-35648, GHSA-wj55-88gf-x564 | Low | 0.2% | 26 Mar, 2026 | npm openclaw |
Malicious release: Malicious code in browserstack-electron-forge-include-package-plugin (npm) MAL-2026-2243 | Malicious | Not scored | 26 Mar, 2026 | npm browserstack-electron-forge-include-package-plugin |
OpenClaw has Inconsistent Host Exec Environment Override Sanitization CVE-2026-35650, GHSA-39pp-xp36-q6mg | High | 0.5% | 26 Mar, 2026 | npm openclaw |
OpenClaw's Trusted-proxy Control UI sessions retain privileged scopes without device identity on device-less allow paths CVE-2026-35638, GHSA-48vw-m3qc-wr99 | High | 0.3% | 26 Mar, 2026 | npm openclaw |
OpenClaw is vulnerable to unauthenticated resource exhaustion through its voice call webhook handling CVE-2026-35626, GHSA-rm59-992w-x2mv | Medium | 0.5% | 26 Mar, 2026 | npm openclaw |
OpenClaw: Bonjour/DNS-SD TXT metadata steers CLI routing after failed service resolution CVE-2026-35659, GHSA-rvqr-hrcc-j9vv | Medium | 0.1% | 26 Mar, 2026 | npm openclaw |
OpenClaw: Remote media error responses could trigger unbounded memory allocation before failure CVE-2026-35633, GHSA-4qwc-c7g9-4xcw | High | 0.4% | 26 Mar, 2026 | npm openclaw |
OpenClaw: Arbitrary code execution via unvalidated WebView JavascriptInterface CVE-2026-35643, GHSA-cxmw-p77q-wchg | High | 0.4% | 26 Mar, 2026 | npm openclaw |
path-to-regexp vulnerable to Denial of Service via sequential optional groups CVE-2026-4926, GHSA-j3q9-mxjg-w52f | High | 0.8% | 26 Mar, 2026 | npm path-to-regexp |
path-to-regexp vulnerable to Regular Expression Denial of Service via multiple wildcards CVE-2026-4923, GHSA-27v5-c462-wpq7 | Medium | 0.4% | 26 Mar, 2026 | npm path-to-regexp |
OpenClaw's system.run allowlist can be bypassed through an unregistered time dispatch wrapper CVE-2026-35666, GHSA-qm9x-v7cx-7rq4 | High | 0.4% | 26 Mar, 2026 | npm openclaw |
OpenClaw: Nostr inbound DMs could trigger unauthenticated crypto work before sender policy enforcement CVE-2026-35627, GHSA-65h8-27jh-q8wv | High | 0.5% | 26 Mar, 2026 | npm openclaw |
OpenClaw: Synology Chat reply delivery could be rebound through username-based user resolution. CVE-2026-35670, GHSA-wv46-v6xc-2qhf | Medium | 0.2% | 26 Mar, 2026 | npm openclaw |
OpenClaw: Windows media loaders accepted remote-host file URLs before local path validation CVE-2026-34426, CVE-2026-34510, GHSA-98ch-45wp-ch47, GHSA-h3x4-hc5v-v2gm | Medium | 0.3% | 26 Mar, 2026 | npm openclaw |
OpenClaw: Gateway agent /reset exposes admin session reset to operator.write callers CVE-2026-35660, GHSA-wq58-2pvg-5h4f | High | 0.3% | 26 Mar, 2026 | npm openclaw |
OpenClaw: Gateway Canvas local-direct requests bypass Canvas HTTP and WebSocket authentication CVE-2026-35634, GHSA-6mqc-jqh6-x8fc | Medium | 0.1% | 26 Mar, 2026 | npm openclaw |
OpenClaw: Plivo V2 verified replay identity drifts on query-only variants CVE-2026-35618, GHSA-cg6c-q2hx-69h7 | High | 0.3% | 26 Mar, 2026 | npm openclaw |
Convict has Prototype Pollution via startsWith() function CVE-2026-33864, GHSA-44fc-8fm5-q62h | Critical | Not scored | 26 Mar, 2026 | npm convict |
Convict has prototype pollution via load(), loadFile(), and schema initialization CVE-2026-33863, GHSA-hf2r-9gf9-rwch | Critical | Not scored | 26 Mar, 2026 | npm convict |
brace-expansion: Zero-step sequence causes process hang and memory exhaustion CVE-2026-33750, GHSA-f886-m6hf-6m8v | High | 0.4% | 26 Mar, 2026 | npm brace-expansion |
OpenClaw is vulnerable to Path Traversal through path validation bypass CVE-2026-32846, GHSA-f6pf-4gjx-c94r, GHSA-hggm-x7r9-mm7v | High | 0.7% | 26 Mar, 2026 | npm openclaw |
srvx is vulnerable to middleware bypass via absolute URI in request line CVE-2026-33732, GHSA-p36q-q72m-gchr | Medium | 0.3% | 26 Mar, 2026 | npm srvx |
Malicious release: Malicious code in spr-i18n-labels (npm) GHSA-6j5m-xf2c-cx8x, MAL-2026-2238 | Malicious | Not scored | 26 Mar, 2026 | npm spr-i18n-labels |
Malicious release: Malicious code in jsonify-builder (npm) GHSA-2qfm-86gm-fpjc, MAL-2026-2237 | Malicious | Not scored | 26 Mar, 2026 | npm jsonify-builder |
Malicious release: Malicious code in onboarding-server (npm) MAL-2026-2236 | Malicious | Not scored | 26 Mar, 2026 | npm onboarding-server |
Malicious release: Malicious code in srcsrctest (npm) MAL-2026-2235 | Malicious | Not scored | 26 Mar, 2026 | npm srcsrctest |
Malicious release: Malicious code in security-install-analytics (npm) MAL-2026-2234 | Malicious | Not scored | 26 Mar, 2026 | npm security-install-analytics |
Malicious release: Malicious code in @zecho/libsignal (npm) GHSA-53rc-g3gw-946r, MAL-2026-2229 | Malicious | Not scored | 26 Mar, 2026 | npm @zecho/libsignal |
Malicious release: Malicious code in @zecho/baileys-mod (npm) GHSA-887f-wrq6-j685, MAL-2026-2228 | Malicious | Not scored | 26 Mar, 2026 | npm @zecho/baileys-mod |