Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in pearpass-lib-vault (npm) GHSA-h4ch-r74v-826j, MAL-2026-1238 | Malicious | Not scored | 04 Mar, 2026 | npm pearpass-lib-vault |
Malicious release: Malicious code in pearpass-lib-vault-core (npm) GHSA-2ghq-7hh3-2x5g, MAL-2026-1239 | Malicious | Not scored | 04 Mar, 2026 | npm pearpass-lib-vault-core |
Malicious release: Malicious code in pearpass-lib-ui-theme-provider (npm) GHSA-vqrg-7m7p-6r59, MAL-2026-1237 | Malicious | Not scored | 04 Mar, 2026 | npm pearpass-lib-ui-theme-provider |
Malicious release: Malicious code in @get-wrecked/overlay (npm) GHSA-w5g4-m76j-qxg7, MAL-2026-1241 | Malicious | Not scored | 04 Mar, 2026 | npm @get-wrecked/overlay |
Malicious release: Malicious code in @molb-prelogin/gobiz-config (npm) MAL-2026-1236 | Malicious | Not scored | 04 Mar, 2026 | npm @molb-prelogin/gobiz-config |
OpenClaw's serialize sandbox registry writes to prevent races and delete-rollback corruption CVE-2026-32018, GHSA-gq83-8q7q-9hfx | Medium | 0.1% | 03 Mar, 2026 | npm openclaw |
OpenClaw's Node role device-identity bypass allows unauthorized node.event injection CVE-2026-32001, GHSA-rv2q-f2h5-6xmg | Medium | 0.3% | 03 Mar, 2026 | npm openclaw |
OpenClaw's commands.allowFrom sender authorization accepted conversation identifiers via ctx.From GHSA-2ch6-x3g4-7759 | High | Not scored | 03 Mar, 2026 | npm openclaw |
OpenClaw has Windows Lobster shell fallback command injection in constrained fallback path CVE-2026-31995, GHSA-fg3m-vhrr-8gj6 | Medium | 0.6% | 03 Mar, 2026 | npm openclaw |
OpenClaw's Zalo group sender allowlist bypass permits unauthorized GROUP dispatch GHSA-534w-2vm4-89xr | Medium | Not scored | 03 Mar, 2026 | npm openclaw |
OpenClaw has Canvas route hardening for mixed-trust deployments GHSA-cjv3-m589-v3rx | Medium | Not scored | 03 Mar, 2026 | npm openclaw |
OpenClaw's exec allowlist wrapper analysis did not unwrap env/shell dispatch chains CVE-2026-27566, GHSA-jj82-76v6-933r | High | 0.4% | 03 Mar, 2026 | npm openclaw |
OpenClaw's typed sender-key matching for toolsBySender prevents identity-collision policy bypass CVE-2026-32039, GHSA-wpph-cjgr-7c39 | Medium | 0.2% | 03 Mar, 2026 | npm openclaw |
OpenClaw's Signal reaction-only status events could, in limited cases, be enqueued before access checks CVE-2026-32050, GHSA-792q-qw95-f446 | Medium | 0.2% | 03 Mar, 2026 | npm openclaw |
OpenClaw's sandbox bind validation could bypass allowed-root and blocked-path checks via symlink-parent missing-leaf paths CVE-2026-27523, GHSA-m8v2-6wwh-r4gc | High | 0.3% | 03 Mar, 2026 | npm openclaw |
OpenClaw: Zip extraction symlink traversal could write outside destination GHSA-jxrq-8fm4-9p58 | High | Not scored | 03 Mar, 2026 | npm openclaw |
OpenClaw's Nextcloud Talk webhook replay could trigger duplicate inbound processing CVE-2026-28449, GHSA-r9q5-c7qc-p26w | Medium | 0.3% | 03 Mar, 2026 | npm openclaw |
OpenClaw's tools.exec.safeBins generic fallback allowed interpreter-style inline payload execution in allowlist mode GHSA-8mf7-vv8w-hjr2 | Low | Not scored | 03 Mar, 2026 | npm openclaw |
OpenClaw's Synology Chat dmPolicy=allowlist failed open on empty allowedUserIds, allowing unauthorized agent dispatch CVE-2026-31998, GHSA-gw85-xp4q-5gp9 | High | 0.3% | 03 Mar, 2026 | npm openclaw |
OpenClaw reuses the gateway auth token in the owner ID prompt hashing fallback CVE-2026-32897, GHSA-v6x2-2qvm-6gv8 | Medium | 0.3% | 03 Mar, 2026 | npm openclaw |
OpenClaw hook transform path containment missed symlink-resolved escapes GHSA-659f-22xc-98f2 | High | Not scored | 03 Mar, 2026 | npm openclaw |
In OpenClaw, manually adding sort to tools.exec.safeBins could bypass allowlist approval via --compress-program CVE-2026-32010, GHSA-4gc7-qcvf-38wg | Medium | 0.3% | 03 Mar, 2026 | npm openclaw |
OpenClaw has a BlueBubbles group allowlist mismatch via DM pairing-store fallback CVE-2026-32006, GHSA-25pw-4h6w-qwvm | Medium | 0.3% | 03 Mar, 2026 | npm openclaw |
OpenClaw's voice-call Twilio replay dedupe now bound to authenticated webhook identity GHSA-gcj7-r3hg-m7w6 | Low | Not scored | 03 Mar, 2026 | npm openclaw |
OpenClaw has multiple E2E/test Dockerfiles that run all processes as root GHSA-w7j5-j98m-w679 | High | Not scored | 03 Mar, 2026 | npm openclaw |
OpenClaw has exec allowlist/safeBins policy-runtime mismatch via env -S wrapper interpretation GHSA-796m-2973-wc5q | Medium | Not scored | 03 Mar, 2026 | npm openclaw |
OpenClaw: Microsoft Teams media fetch paths bypass shared SSRF guard model GHSA-7qf6-h84j-8fq4 | Low | Not scored | 03 Mar, 2026 | npm openclaw |
OpenClaw's browser-origin WebSocket auth hardening gap could enable loopback password brute-force chains CVE-2026-32025, GHSA-jmmg-jqc7-5qf4 | High | 0.3% | 03 Mar, 2026 | npm openclaw |
OpenClaw improperly parses X-Forwarded-For behind trusted proxies allows client IP spoofing in security decisions CVE-2026-32029, GHSA-2rgf-hm63-5qph | Medium | 0.2% | 03 Mar, 2026 | npm openclaw |
OpenClaw's non-default autoAllowSkills setting could bypass on-miss exec prompt GHSA-7ff8-xjh3-mgh6 | High | Not scored | 03 Mar, 2026 | npm openclaw |
OpenClaw's shell startup env injection bypasses system.run allowlist intent (RCE class) CVE-2026-32056, GHSA-xgf2-vxv2-rrmg | High | 0.6% | 03 Mar, 2026 | npm openclaw |
OpenClaw's runtime /debug override path accepted prototype-reserved keys CVE-2026-27524, GHSA-62f6-mrcj-v8h5 | Low | 0.3% | 03 Mar, 2026 | npm openclaw |
OpenClaw has a workspace-only sandbox guard mismatch for @-prefixed absolute paths CVE-2026-32033, GHSA-27cr-4p5m-74rj | Medium | 0.4% | 03 Mar, 2026 | npm openclaw |
OpenClaw affected by BASH_ENV / ENV startup-file injection into spawned shell commands GHSA-w9cg-v44m-4qv8 | High | Not scored | 03 Mar, 2026 | npm openclaw |
OpenClaw has stored XSS in exported session HTML viewer via markdown/raw-HTML rendering GHSA-r294-2894-92j3 | Medium | Not scored | 03 Mar, 2026 | npm openclaw |
OpenClaw: Sandbox media fallback tmp symlink alias bypass allows host file reads outside sandboxRoot GHSA-xmv6-r34m-62p4 | High | Not scored | 03 Mar, 2026 | npm openclaw |
OpenClaw's `tools.exec.safeBins` PATH-hijack allowed trojan binaries to bypass allowlist checks CVE-2026-32015, GHSA-g75x-8qqm-2vxp | High | 0.1% | 03 Mar, 2026 | npm openclaw |
OpenClaw Improperly Neutralizes Line Breaks in systemd Unit Generation Enables Local Command Execution (Linux) CVE-2026-32063, GHSA-vffc-f7r7-rx2w | High | 1.2% | 03 Mar, 2026 | npm openclaw |
OpenClaw has a Trusted-proxy Control UI pairing bypass which allows unpaired node sessions CVE-2026-32057, GHSA-vvgp-4c28-m3jm | Medium | 0.4% | 03 Mar, 2026 | npm openclaw |
OpenClaw Loopback CDP probe can leak Gateway token to local listener CVE-2026-22174, GHSA-v3j7-34xh-6g3w | Medium | 0.1% | 03 Mar, 2026 | npm openclaw |
OpenClaw has a Command Injection via unescaped environment assignments in Windows Scheduled Task script generation CVE-2026-22176, GHSA-pj5x-38rw-6fph | High | 0.7% | 03 Mar, 2026 | npm openclaw |
OpenClaw has a Discord `allowFrom` slug-collision authorization bypass GHSA-4cqv-h74h-93j4 | Medium | Not scored | 03 Mar, 2026 | npm openclaw |
OpenClaw has an opt-in insecure Control UI auth over plaintext HTTP could allow privileged access CVE-2026-32034, GHSA-3cvx-236h-m9fj | Medium | 0.4% | 03 Mar, 2026 | npm openclaw |
OpenClaw has a IPv6 multicast SSRF classifier bypass GHSA-h97f-6pqj-q452 | Medium | Not scored | 03 Mar, 2026 | npm openclaw |
OpenClaw exec allowlist safeBins short-option bypass could permit arbitrary file write CVE-2026-32017, GHSA-3x3x-h76w-hp98 | Medium | 0.3% | 03 Mar, 2026 | npm openclaw |
OpenClaw has auth inconsistency on local Browser Extension Relay /extension endpoint GHSA-pfv7-rr5m-qmv6 | Medium | Not scored | 03 Mar, 2026 | npm openclaw |
OpenClaw has a Feishu allowFrom authorization bypass via display-name collision CVE-2026-32021, GHSA-j4xf-96qf-rx69 | Medium | 0.2% | 03 Mar, 2026 | npm openclaw |
OpenClaw has macOS `system.run` allowlist bypass via quoted command substitution CVE-2026-22179, GHSA-9p38-94jf-hgjj | High | 0.7% | 03 Mar, 2026 | npm openclaw |
OpenClaw shell-env fallback trusted startup env and could execute attacker-influenced login-shell paths GHSA-5h2c-8v84-qpvr | Medium | Not scored | 03 Mar, 2026 | npm openclaw |
OpenClaw plugin runtime command execution is part of trusted plugin boundary GHSA-ff98-w8hj-qrxf | Medium | Not scored | 03 Mar, 2026 | npm openclaw |