Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Flowise: CSV Agent Prompt Injection Remote Code Execution Vulnerability CVE-2026-70477, GHSA-5xvg-pmgg-3mxr | Critical | 0.8% | 04 Aug, 2026 | npm flowise npm flowise-components |
Flowise: RCE via CSVAgent csvFile data URI base64 segment is interpolated into Python source without validation CVE-2026-69264, GHSA-4j8x-x6v7-w9rq | Critical | 1.1% | 04 Aug, 2026 | npm flowise npm flowise-components |
Flowise: Pyodide validator Unicode homoglyph bypass leads to RCE CVE-2026-70470, GHSA-52fh-8v99-63c2 | Critical | 1.0% | 04 Aug, 2026 | npm flowise npm flowise-components |
@a2ui/web_core: `openUrl` permits `javascript:` URI execution via agent-supplied button actions CVE-2026-10032, GHSA-72qq-p3r5-f7wq | Critical | 0.1% | 04 Aug, 2026 | npm @a2ui/web_core |
Flowise RCE via SQLite Record Manager Node CVE-2026-69259, GHSA-x3hf-7cj6-3r4m | Critical | 0.8% | 04 Aug, 2026 | npm flowise npm flowise-components |
Flowise: Remote Code Execution Vulnerability in CSVAgent CVE-2026-69256, GHSA-x6vm-w76m-8j7g | Critical | 1.0% | 04 Aug, 2026 | npm flowise npm flowise-components |
Flowise: CSV Agent Remote Code Execution via Pyodide Code Injection — Root Shell Verified CVE-2026-69255, GHSA-vmv7-4m6c-3cg5 | Critical | 0.6% | 04 Aug, 2026 | npm flowise npm flowise-components |
Flowise: RCE via NodeVM Sandbox Escape in executeJavaScriptCode() nodeVMOptions Override CVE-2026-69254, GHSA-3769-jgqc-cxm7 | Critical | 0.7% | 04 Aug, 2026 | npm flowise npm flowise-components |
Flowise Sandbox Escape to RCE CVE-2026-69253, GHSA-wg86-r78f-74mp | Critical | 0.7% | 04 Aug, 2026 | npm flowise npm flowise-components |
Flowise RCE via TypeORM DataSource CVE-2026-69251, GHSA-g32j-mmxr-gfq5 | Critical | 2.7% | 04 Aug, 2026 | npm flowise npm flowise-components |
Sequelize: SQL Injection (Oracle DB) CVE-2026-69240, GHSA-v8fg-2rw7-q452 | Critical | 0.5% | 03 Aug, 2026 | npm sequelize |
undici vulnerable to cross-user information disclosure and parse-time crash via degenerate private cache directives CVE-2026-13697, GHSA-4cwx-7wf7-3272 | Critical | 0.6% | 29 Jul, 2026 | npm undici |
@hypequery/clickhouse has SQL Injection in parameter escaping that allows arbitrary SQL execution CVE-2026-54658, GHSA-6wcc-39rp-hh9p | Critical | 0.8% | 28 Jul, 2026 | npm @hypequery/clickhouse |
Shescape: Shell injection via unescaped parentheses on Windows with CMD CVE-2026-73414, GHSA-w4hw-qcx7-56pr | Critical | 0.9% | 24 Jul, 2026 | npm shescape |
sm-crypto: Predictable SM2 key generation in Node.js: default RNG uses Math.random + wall clock CVE-2026-73567, GHSA-vh45-f885-3848 | Critical | 0.4% | 24 Jul, 2026 | npm sm-crypto |
Budibase: Unauthenticated REST Datasource Credential Theft via Cross-Origin Auth Leak CVE-2026-73407, GHSA-mqhr-6j6h-74p5 | Critical | 0.5% | 24 Jul, 2026 | npm @budibase/server |
Budibase: OIDC SSO account takeover: incoming identity linked by email without checking email_verified CVE-2026-73302, GHSA-hp6v-6jw7-gv2f | Critical | 0.4% | 24 Jul, 2026 | npm @budibase/server |
Budibase: SQL Injection via `multipleStatements: true` CVE-2026-73300, GHSA-q6x4-v3qx-85qw | Critical | 0.6% | 24 Jul, 2026 | npm @budibase/server |
Prompty: Server-Side Template Injection to Remote Code Execution in the @prompty/core Nunjucks Renderer CVE-2026-73299, GHSA-w28w-gp39-m4p6 | Critical | 1.8% | 24 Jul, 2026 | npm @prompty/core |
Velocity.js: Remote Code Execution via property-read to Function constructor (bypass of GHSA-j658-c2gf-x6pq fix) CVE-2026-73649, GHSA-7gfh-x38p-prh3 | Critical | 0.7% | 24 Jul, 2026 | npm velocityjs |
seroval: `seroval.fromJSON()` Promise resolver type confusion invokes attacker-controlled methods during deserialization CVE-2026-59940, GHSA-mv8w-475r-vwqw | Critical | 0.8% | 24 Jul, 2026 | npm seroval |
@better-auth/scim: account takeover and stale access via SCIM provider-id collision CVE-2026-67330, GHSA-rjg6-39jm-rgg4 | Critical | 0.6% | 24 Jul, 2026 | npm @better-auth/scim |
PostCSS: Arbitrary file read and information disclosure via attacker-controlled sourceMappingURL in CSS comments CVE-2026-45623, GHSA-6g55-p6wh-862q | Critical | 0.6% | 23 Jul, 2026 | npm postcss |
Auth.js: Configuration errors can cause existence-based auth checks to fail open (auth object populated with an error) CVE-2026-73421, GHSA-8fpg-xm3f-6cx3 | Critical | 0.6% | 23 Jul, 2026 | npm next-auth |
Auth.js: Email normalizer validates the address before Unicode normalization, allowing a homoglyph @ bypass CVE-2026-73420, GHSA-7rqj-j65f-68wh | Critical | 0.7% | 23 Jul, 2026 | npm @auth/core npm next-auth |
@vitest/browser: Browser Mode provider commands bypass the file-access permission gate CVE-2026-73653, GHSA-p63j-vcc4-9vmv | Critical | 0.8% | 21 Jul, 2026 | npm @vitest/browser |
Qinglong has an incomplete fix for CVE-2026-3965: Improper Authentication CVE-2026-55445, GHSA-v667-gc2r-2xm7 | Critical | 0.5% | 15 Jul, 2026 | npm @whyour/qinglong |
websocket-driver: Message corruption via abuse of protocol length headers CVE-2026-54466, GHSA-xv26-6w52-cph6 | Critical | 0.4% | 15 Jul, 2026 | npm websocket-driver |
NocoBase: SQL injection in /api/myInAppChannels:list filter to PG-superuser RCE CVE-2026-52887, GHSA-p849-8hwh-84j9 | Critical | 0.9% | 15 Jul, 2026 | npm @nocobase/plugin-notification-in-app-message |
n8n-MCP: Cross-tenant access to workflow version backups in multi-tenant HTTP deployments CVE-2026-54052, GHSA-j6r7-6fhx-77wx | Critical | 0.4% | 14 Jul, 2026 | npm n8n-mcp |
Credential confusion in @sigstore/oci can leak registry credentials to an attacker-controlled registry CVE-2026-59891, GHSA-pf56-329r-95rw | Critical | 0.5% | 14 Jul, 2026 | npm @sigstore/oci |
SAP Approuter Vulnerable to HTTP Request Smuggling CVE-2026-27690, GHSA-8m85-wqg7-c529 | Critical | 0.7% | 14 Jul, 2026 | npm @sap/approuter |
mcp-server-kubernetes argument injection can expose Kubernetes cluster credentials CVE-2026-61459, GHSA-wmg3-h8mf-wgvr, PYSEC-2026-3685 | Critical | 2.4% | 10 Jul, 2026 | PyPI mcp-server-kubernetes npm mcp-server-kubernetes |
node-tar: Decompression/parse DoS via unlimited input CVE-2026-59873, GHSA-23hp-3jrh-7fpw | Critical | 0.6% | 08 Jul, 2026 | npm tar |
@better-auth/sso provider registration has server-side request forgery via unvalidated OIDC endpoints CVE-2026-53513, GHSA-5rr4-8452-hf4v | Critical | 0.2% | 07 Jul, 2026 | npm @better-auth/sso |
Better Auth has insecure cryptographic defaults in oidcProvider: alg=none advertised and plain PKCE accepted by default CVE-2026-67336, GHSA-9h47-pqcx-hjr4 | Critical | 0.2% | 07 Jul, 2026 | npm better-auth |
Better Auth: OAuth refresh-token replay via missing client authentication on oidc-provider and mcp plugins CVE-2026-53512, GHSA-pw9m-5jxm-xr6h | Critical | 0.3% | 07 Jul, 2026 | npm better-auth |
9routers has Exposure of Sensitive Information and Unprotected Database Import/Export, Allowing Complete Credential Theft and Database Takeover CVE-2026-55500, GHSA-qvfm-67h2-2qfx | Critical | 0.5% | 06 Jul, 2026 | npm 9router |
9router has unauthenticated CRUD on /api/providers and Full API Key Leak via /api/usage/stats CVE-2026-59801, CVE-2026-62327, CVE-2026-62328, GHSA-vjc7-jrh9-9j86 | Critical | 6.3% | 06 Jul, 2026 | npm 9router |
Decompress: Archive extraction can create files and links outside of the target directory CVE-2026-53486, GHSA-mp2f-45pm-3cg9 | Critical | 0.7% | 06 Jul, 2026 | npm @xhmikosr/decompress npm decompress |
TidGi Desktop Remote Code Execution via Malicious TiddlyWiki Repository Import — Tiddler Startup Module Auto-Execution CVE-2026-14722, GHSA-9hc2-hjx8-q6pv | Critical | 0.5% | 05 Jul, 2026 | npm tidgi |
9router's Hardcoded Default fallback JWT Secret Allows Authentication Bypass CVE-2026-49352, GHSA-jphh-m39h-6gwx | Critical | 0.6% | 02 Jul, 2026 | npm 9router |
9router: Missing Authorization and OS Command Injection CVE-2026-59800, GHSA-g6g7-pvmx-m74p | Critical | 2.1% | 02 Jul, 2026 | npm 9router |
Ghost: Cache-poisoning XSS in Ghost frontend via x-ghost-preview header BIT-ghost-2026-53943, CVE-2026-53943, GHSA-62q6-4hv4-vjrw | Critical | 0.4% | 24 Jun, 2026 | npm ghost |
Budibase has nonymous NoSQL operator injection via published-app query templates CVE-2026-54350, GHSA-8qv3-p479-cj62 | Critical | 0.5% | 23 Jun, 2026 | npm @budibase/server |
expr-eval vulnerable to Code Execution CVE-2026-12866, GHSA-q9v2-7m5w-4693 | Critical | 0.9% | 23 Jun, 2026 | Maven org.webjars.npm:expr-eval npm expr-eval |
Budibase has arbitrary file read by workspace-builder via PWA-zip symlink upload CVE-2026-54352, GHSA-w7mq-r738-x278 | Critical | 0.5% | 22 Jun, 2026 | npm @budibase/server |
Budibase: Mass Assignment in Webhook Trigger Allows Cross-Workspace Automation Execution via appId Override CVE-2026-54351, GHSA-rgvg-3wpc-h44p | Critical | 0.5% | 22 Jun, 2026 | npm @budibase/server |
scimPatch vulnerable to prototype pollution via unfiltered keys in patch CVE-2026-48170, GHSA-9m6g-wc8r-q59c | Critical | 0.4% | 22 Jun, 2026 | npm scim-patch |
jupyterlab-git extension: Stored XSS leading to RCE CVE-2026-54527, GHSA-f962-v9hr-pfg5, PYSEC-2026-2540, PYSEC-2026-2541 | Critical | 0.5% | 19 Jun, 2026 | PyPI jupyterlab-git PyPI jupyterlab-git-core npm @jupyterlab/git |