Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Strapi: Password Reset Does Not Revoke Existing Refresh Sessions CVE-2026-22706, GHSA-hvp3-26wx-g2w4 | Low | 0.3% | 13 May, 2026 | npm @strapi/admin npm @strapi/plugin-users-permissions |
Astro: Server island encrypted parameters vulnerable to cross-component replay CVE-2026-45028, GHSA-xr5h-phrj-8vxv | Low | 0.1% | 13 May, 2026 | npm astro |
Next.js vulnerable to cache poisoning via collisions in React Server Component cache-busting CVE-2026-44582, GHSA-vfv6-92ff-j949 | Low | 0.2% | 11 May, 2026 | npm next |
Hono has improper validation of NumericDate claims (exp, nbf, iat) in JWT verify() CVE-2026-44459, GHSA-hm8q-7f3q-5f36 | Low | 0.2% | 09 May, 2026 | npm hono |
nuxt-og-image SSRF — bypass of GHSA-pqhr-mp3f-hrpp / v6.2.5 fix (IPv6 + redirect) CVE-2026-44589, GHSA-c2rm-g55x-8hr5 | Low | 0.2% | 07 May, 2026 | npm nuxt-og-image |
mcp-data-vis vulnerable to denial of service via unsanitized `select` key lookup on `Object.prototype` with `precompile: true` GHSA-r27j-894h-3w3p | Low | Not scored | 06 May, 2026 | npm icu-minify |
parse-server: MFA SMS one-time password accepted twice under concurrent login BIT-parse-2026-43930, CVE-2026-43930, GHSA-jpq4-7fmq-q5fj | Low | 0.2% | 05 May, 2026 | npm parse-server |
@puchunjie/doc-tools-mcp has a Path Traversal Issue CVE-2026-7738, GHSA-gcmm-c94j-j47x | Low | 0.3% | 04 May, 2026 | npm @puchunjie/doc-tools-mcp |
yii2-mcp-server has a Command Injection Issue CVE-2026-7600, GHSA-gc8w-x73w-p4rh | Low | 1.2% | 02 May, 2026 | npm yii2-mcp-server |
OpenClaw: Browser CDP profile creation skipped strict-mode SSRF checks CVE-2026-45000, GHSA-j4c5-89f5-f3pm | Low | 0.2% | 25 Apr, 2026 | npm openclaw |
Axios: Null Byte Injection via Reverse-Encoding in AxiosURLSearchParams CVE-2026-42040, GHSA-xhjh-pmcv-23jw | Low | 0.2% | 24 Apr, 2026 | npm axios |
OpenClaw: Slack thread context could include messages from non-allowlisted senders CVE-2026-41358, GHSA-qm77-8qjp-4vcm | Low | 0.1% | 23 Apr, 2026 | npm openclaw |
Cloudflare has SSRF via redirect following through its image-binding-transform endpoint (incomplete fix for GHSA-qpr4) CVE-2026-41321, GHSA-88gm-j2wx-58h6 | Low | 0.2% | 23 Apr, 2026 | npm @astrojs/cloudflare |
OpenClaw: Assistant media route missed scope enforcement for trusted-proxy authorization CVE-2026-41908, GHSA-v8qf-fr4g-28p2 | Low | 0.2% | 23 Apr, 2026 | npm openclaw |
copilot-api has Reliance on Reverse DNS Resolution for a Security-Critical Action CVE-2026-6874, GHSA-3vr4-cvmg-7fx4 | Low | 0.3% | 23 Apr, 2026 | npm copilot-api |
OpenClaw: TOCTOU read in exec script preflight CVE-2026-43529, GHSA-gj9q-8w99-mp8j | Low | 0.1% | 16 Apr, 2026 | npm openclaw |
ApostropheCMS: User Enumeration via Timing Side Channel in Password Reset Endpoint CVE-2026-33877, GHSA-mj7r-x3h3-7rmr | Low | 0.4% | 15 Apr, 2026 | npm apostrophe |
DbGate has cross site scripting via the SVG Icon String Handler component CVE-2026-6216, GHSA-j8j5-7r4h-vj2g | Low | 0.2% | 13 Apr, 2026 | npm dbgate-web |
unhead: Streaming SSR `streamKey` injected into inline script without identifier validation GHSA-x7mm-9vvv-64w8 | Low | Not scored | 10 Apr, 2026 | npm unhead |
@saltcorn/data vulnerable to SQL Injection via jsexprToSQL Literal Handler GHSA-59xv-588h-2vmm | Low | Not scored | 10 Apr, 2026 | npm @saltcorn/data |
OpenClaw vulnerable to SSRF in src/agents/tools/web-fetch.ts CVE-2026-6011, GHSA-52vj-fvrv-7q82 | Low | 0.4% | 10 Apr, 2026 | npm openclaw |
awwaiid mcp-server-taskwarrior vulnerable to command injection CVE-2026-5833, GHSA-95hg-3c55-xf9x | Low | 0.7% | 09 Apr, 2026 | npm mcp-server-taskwarrior |
OpenClaw: Zalo replay dedupe cache could suppress events across authenticated webhook targets CVE-2026-41362, GHSA-fqrj-m88p-qf3v | Low | 0.3% | 07 Apr, 2026 | npm openclaw |
Electron: Crash in clipboard.readImage() on malformed clipboard image data CVE-2026-34781, GHSA-f37v-82c4-4x64 | Low | 0.1% | 07 Apr, 2026 | npm electron |
@elgentos/magento2-dev-mcp vulnerable to command injection CVE-2026-5603, GHSA-xqv9-qr76-hfq2 | Low | 0.9% | 05 Apr, 2026 | npm @elgentos/magento2-dev-mcp |
@nor2/heim-mcp vulnerable to command injection CVE-2026-5602, GHSA-wx4p-jr66-jfp9 | Low | 0.9% | 05 Apr, 2026 | npm @nor2/heim-mcp |
Parse Server: File upload Content-Type override via extension mismatch BIT-parse-2026-35200, CVE-2026-35200, GHSA-vr5f-2r24-w5hc | Low | 0.2% | 04 Apr, 2026 | npm parse-server |
OpenClaw: Discord voice ingress authorization can be bypassed via channel, name, and stale-role validation gaps CVE-2026-41382, GHSA-x2m8-53h4-6hch | Low | 0.2% | 03 Apr, 2026 | npm openclaw |
OpenClaw: Discord Component Interaction Misclassifies Group DM as Direct Message CVE-2026-41341, GHSA-6336-qqw9-v6x6 | Low | 0.1% | 03 Apr, 2026 | npm openclaw |
OpenClaw: Discord Slash Commands Bypass Group DM Channel Allowlist CVE-2026-41348, GHSA-rvvf-6vh3-9j43 | Low | 0.2% | 03 Apr, 2026 | npm openclaw |
OpenClaw: Gateway `device.token.rotate` does not terminate active WebSocket sessions after credential rotation CVE-2026-41356, GHSA-rfqg-qgf8-xr9x | Low | 0.2% | 03 Apr, 2026 | npm openclaw |
OpenClaw: HTTP operator endpoints lack browser-origin validation in trusted-proxy mode CVE-2026-41347, GHSA-mhr7-2xmv-4c4q | Low | 0.1% | 03 Apr, 2026 | npm openclaw |
TeleJSON: DOM XSS via unsanitised constructor name in `new Function()` CVE-2026-47099, GHSA-ccgf-5rwj-j3hv | Low | 0.4% | 02 Apr, 2026 | npm telejson |
OpenClaw: Matrix thread root and reply context bypass sender allowlist CVE-2026-41376, GHSA-rg8m-3943-vm6q | Low | 0.2% | 02 Apr, 2026 | npm openclaw |
OpenClaw: Zalo webhook replay cache cross-target messageId scope bypass CVE-2026-41402, GHSA-hhq4-97c2-p447 | Low | 0.3% | 02 Apr, 2026 | npm openclaw |
Signal K Server: Arbitrary Prototype Read via `from` Field Bypass CVE-2026-35038, GHSA-qh3j-mrg8-f234 | Low | 0.3% | 02 Apr, 2026 | npm signalk-server |
fast-filesystem-mcp is vulnerable to command injection through handleGetDiskUsage function CVE-2026-5327, GHSA-5226-3rvg-hp4x | Low | 1.2% | 02 Apr, 2026 | npm fast-filesystem-mcp |
a11y-mcp: Server-Side Request Forgery (SSRF) vulnerability in A11yServer function CVE-2026-5323, GHSA-prmx-7v35-7q82 | Low | 0.1% | 02 Apr, 2026 | npm a11y-mcp |
OpenClaw: Google Chat Authz Bypass via Group Policy Rebinding with Mutable Space displayName CVE-2026-35617, GHSA-52q4-3xjc-6778 | Low | 0.2% | 29 Mar, 2026 | npm openclaw |
Parse Server has an MFA single-use token bypass via concurrent authData login requests BIT-parse-2026-34224, CVE-2026-34224, GHSA-w73w-g5xw-rwhf | Low | 0.3% | 29 Mar, 2026 | npm parse-server |
Trix is vulnerable to XSS through JSON deserialization bypass in drag-and-drop (Level0InputController) CVE-2026-73427, GHSA-53p3-c7vp-4mcc | Low | 0.6% | 29 Mar, 2026 | RubyGems action_text-trix npm trix |
Handlebars.js has a Property Access Validation Bypass in container.lookup GHSA-442j-39wm-28r2 | Low | Not scored | 29 Mar, 2026 | npm handlebars |
OpenClaw: Nextcloud Talk room allowlist matched colliding room names instead of stable room tokens CVE-2026-35624, GHSA-xhq5-45pm-2gjr | Low | 0.2% | 26 Mar, 2026 | npm openclaw |
OpenClaw may have stale policy enforcement for queued node actions CVE-2026-35648, GHSA-wj55-88gf-x564 | Low | 0.2% | 26 Mar, 2026 | npm openclaw |
@grackle-ai/server JSON.parse lacks try-catch logic in its gRPC Service AdapterConfig Handling GHSA-8g29-8xwr-qmhr | Low | Not scored | 25 Mar, 2026 | npm @grackle-ai/server |
@grackle-ai/server has a Missing Secure Flag on Session Cookie GHSA-5j35-xr4g-vwf4 | Low | Not scored | 25 Mar, 2026 | npm @grackle-ai/server |
@grackle-ai/server: Unescaped Error String in renderPairingPage() HTML Template GHSA-7q9x-8g6p-3x75 | Low | Not scored | 25 Mar, 2026 | npm @grackle-ai/server |
Astro: Remote allowlist bypass via unanchored matchPathname wildcard CVE-2026-33769, GHSA-g735-7g2w-hh3f | Low | 0.3% | 24 Mar, 2026 | npm astro |
Parse Server: MFA recovery code single-use bypass via concurrent requests BIT-parse-2026-33624, CVE-2026-33624, GHSA-2299-ghjr-6vjp | Low | 0.2% | 24 Mar, 2026 | npm parse-server |
jsrsasign: Division by Zero Allows Invalid JWK Modulus to Cause Deterministic Zero Output in RSA Operations CVE-2026-4603, GHSA-464q-cqxq-xhgr | Low | 0.1% | 23 Mar, 2026 | npm jsrsasign |