Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
OpenClaw: Config writes could persist resolved ${VAR} secrets to disk CVE-2026-28475, GHSA-47q7-97xp-m272 | Medium | 0.3% | 02 Mar, 2026 | npm openclaw |
OpenClaw has Zip Slip path traversal in tar archive extraction CVE-2026-28453, GHSA-p25h-9q54-ffvw | High | 0.5% | 02 Mar, 2026 | npm openclaw |
OpenClaw gateway agents.files symlink escape allowed out-of-workspace file read/write CVE-2026-32013, GHSA-fgvx-58p6-gjwc | Critical | 0.7% | 02 Mar, 2026 | npm openclaw |
OpenClaw Node system.run approval context-binding weakness in approval-enabled host=node flows CVE-2026-32058, GHSA-hjvp-qhm6-wrh2 | Low | 0.2% | 02 Mar, 2026 | npm openclaw |
OpenClaw voice-call media stream validated streams after upgrade, which could allow pre-start unauthenticated sockets to increase resource pressure CVE-2026-32062, GHSA-mfg5-7q5g-f37j | High | 0.5% | 02 Mar, 2026 | npm @openclaw/voice-call npm openclaw |
OpenClaw's inbound media downloads could exceed configured byte limits before rejection across multiple channels CVE-2026-32049, GHSA-rxxp-482v-7mrh | High | 0.6% | 02 Mar, 2026 | npm openclaw |
OpenClaw Canvas Path Traversal Information Disclosure Vulnerability CVE-2026-3689, GHSA-jq4x-98m3-ggq6 | High | 0.9% | 02 Mar, 2026 | npm openclaw |
OpenClaw's exec allow-always can be bypassed via unrecognized multiplexer shell wrappers (busybox/toybox sh -c) CVE-2026-22175, GHSA-gwqp-86q6-w47g | High | 0.4% | 02 Mar, 2026 | npm openclaw |
OpenClaw: Node exec approvals could be replayed across nodes GHSA-6x2m-hqfw-hvpj | Medium | Not scored | 02 Mar, 2026 | npm openclaw |
OpenClaw's allow-always wrapper persistence could bypass future approvals and enable command execution CVE-2026-29607, GHSA-6j27-pc5c-m8w8 | High | 0.5% | 02 Mar, 2026 | npm openclaw |
OpenClaw's Control UI Static File Handler Follows Symlinks and Allows Out-of-Root File Read CVE-2026-32020, GHSA-5ghc-98wh-gwwf | Medium | 0.1% | 02 Mar, 2026 | npm openclaw |
OpenClaw has browser trace/download path symlink escape in temp output handling CVE-2026-32054, GHSA-36h3-7c54-j27r | Medium | 0.1% | 02 Mar, 2026 | npm openclaw |
OpenClaw has ReDoS and regex injection via unescaped Feishu mention metadata in RegExp construction CVE-2026-22178, GHSA-c6hr-w26q-c636 | Medium | 0.3% | 02 Mar, 2026 | npm openclaw |
OpenClaw macOS companion app (beta): allowlist parsing mismatch for system.run shell chains CVE-2026-31993, GHSA-5f9p-f3w2-fwch | Medium | 0.3% | 02 Mar, 2026 | npm openclaw |
OpenClaw has Windows system.run approval mismatch on cmd.exe /c trailing arguments CVE-2026-22168, GHSA-5v6x-rfc3-7qfr | High | 0.4% | 02 Mar, 2026 | npm openclaw |
OpenClaw has Signal group allowlist authorization bypass via DM pairing-store leakage CVE-2026-31991, GHSA-wm8r-w8pf-2v6w | Low | 0.2% | 02 Mar, 2026 | npm openclaw |
@keep-network/tbtc-v2 revealing P2PKH deposit with a wrapped P2SH script GHSA-8986-v76q-8vr2 | High | Not scored | 02 Mar, 2026 | npm @keep-network/tbtc-v2 |
OpenClaw: system.run approvals did not bind PATH-token executable identity, enabling post-approval executable rebind CVE-2026-31997, GHSA-q399-23r3-hfx4 | High | 0.1% | 02 Mar, 2026 | npm openclaw |
OpenClaw has web_search citation redirect SSRF via private-network-allowing policy CVE-2026-31989, GHSA-g99v-8hwm-g76g | High | 0.2% | 02 Mar, 2026 | npm openclaw |
OpenClaw's authorization mismatch allowed write-scope agent runs to reach owner-only tools CVE-2026-32051, GHSA-jr6x-2q95-fh2g | High | 0.4% | 02 Mar, 2026 | npm openclaw |
OpenClaw: Sandbox media TOCTOU could read files outside sandbox root GHSA-7xmq-g46g-f8pv | High | Not scored | 02 Mar, 2026 | npm openclaw |
OpenClaw's TOCTOU symlink race in writeFileWithinRoot could create or truncate files outside root boundaries GHSA-x82f-27x3-q89c | High | Not scored | 02 Mar, 2026 | npm openclaw |
CpenClaw's ACPX Windows wrapper shell fallback allowed cwd injection in specific paths CVE-2026-31999, GHSA-6f6j-wx9w-ff4j | Critical | 0.3% | 02 Mar, 2026 | npm openclaw |
OpenClaw has an unauthorized sender bypass in its stop triggers and /models command authorization GHSA-8m9v-xpgf-g99m | Medium | Not scored | 02 Mar, 2026 | npm openclaw |
OpenClaw's sandboxed sessions_spawn now enforces sandbox inheritance for cross-agent spawns CVE-2026-32048, GHSA-p7gr-f84w-hqg5 | High | 0.3% | 02 Mar, 2026 | npm openclaw |
OpenClaw has unbounded memory growth in Zalo webhook via query-string key churn (unauthenticated DoS) CVE-2026-28461, CVE-2026-32066, GHSA-wr6m-jg37-68xh | High | 0.4% | 02 Mar, 2026 | npm openclaw |
OpenClaw: Unicode canonicalization drift in node metadata policy classification could broaden node allowlists GHSA-392f-ggf5-fp3c | Medium | Not scored | 02 Mar, 2026 | npm openclaw |
OpenClaw: Browser control startup could continue unauthenticated after auth bootstrap failure CVE-2026-32041, GHSA-vpj2-69hf-rppw | High | 0.1% | 02 Mar, 2026 | npm openclaw |
`@orpc/client` has Prototype Pollution via `StandardRPCJsonSerializer` Deserialization CVE-2026-28794, GHSA-m272-9rp6-32mc | Critical | 1.1% | 02 Mar, 2026 | npm @orpc/client |
Qwik vulnerable to Unauthenticated RCE via server$ Deserialization CVE-2026-27971, GHSA-p9x5-jp3h-96mm | Critical | 5.5% | 02 Mar, 2026 | npm @builder.io/qwik |
OneUptime has WebAuthn 2FA bypass: server accepts client-supplied challenge instead of server-stored value, allowing credential replay CVE-2026-28787, GHSA-gjjc-pcwp-c74m | Critical | 0.3% | 02 Mar, 2026 | npm @oneuptime/common |
NocoDB Vulnerable to Stored Cross-Site Scripting via Rich Text Cells CVE-2026-28401, GHSA-wwp2-x4rj-j8rm | Medium | 0.2% | 02 Mar, 2026 | npm nocodb |
NocoDB Vulnerable to SQL Injection via DATEADD Formula CVE-2026-28399, GHSA-45rp-9p97-h852 | Medium | 0.4% | 02 Mar, 2026 | npm nocodb |
NocoDB Vulnerable to Stored Cross-Site Scripting via Comments and Rich Text Cells CVE-2026-28398, GHSA-8vm4-g489-v3w7 | Medium | 0.2% | 02 Mar, 2026 | npm nocodb |
NocoDB Vulnerable to Stored Cross-site Scripting via Comments CVE-2026-28397, GHSA-rcph-x7mj-54mm | Medium | 0.2% | 02 Mar, 2026 | npm nocodb |
NocoDB's Refresh Tokens Not Revoked on Password Reset CVE-2026-28396, GHSA-x4vh-j75g-268g | Medium | 0.2% | 02 Mar, 2026 | npm nocodb |
NocoDB Missing Ownership Validation in MCP Token Operations CVE-2026-28361, GHSA-p9x3-w98f-7j3q | Medium | 0.2% | 02 Mar, 2026 | npm nocodb |
NocoDB has Plaintext Storage of Shared View Passwords CVE-2026-28360, GHSA-mpp2-x7wv-38hv | Low | 0.2% | 02 Mar, 2026 | npm nocodb |
NocoDB Vulnerable to Stored Cross-site Scripting via Rich Text Field CVE-2026-28359, GHSA-qxwq-q265-hc44 | Medium | 0.2% | 02 Mar, 2026 | npm nocodb |
NocoDB Vulnerable to User Enumeration via Password Reset Endpoint CVE-2026-28358, GHSA-387m-j3p9-3php | Low | 0.7% | 02 Mar, 2026 | npm nocodb |
NocoDB has Stored Cross-site Scripting via Formula Cell CVE-2026-28357, GHSA-vx5p-q85x-xm3c | Medium | 0.2% | 02 Mar, 2026 | npm nocodb |
Malicious release: Malicious code in colorize-console (npm) GHSA-g58r-8w2m-744m, MAL-2026-1128 | Malicious | Not scored | 02 Mar, 2026 | npm colorize-console |
Malicious release: Malicious code in @nazi-team/libsignal-node (npm) GHSA-h265-qvfj-vp46, MAL-2026-1120 | Malicious | Not scored | 02 Mar, 2026 | npm @nazi-team/libsignal-node |
Malicious release: Malicious code in @nazi-team/baileys (npm) GHSA-m2fq-rwf5-8c25, MAL-2026-1119 | Malicious | Not scored | 02 Mar, 2026 | npm @nazi-team/baileys |
Malicious release: Malicious code in @sanzxcode/baileys (npm) GHSA-mqv3-h8qx-p79f, MAL-2026-1121 | Malicious | Not scored | 02 Mar, 2026 | npm @sanzxcode/baileys |
Malicious release: Malicious code in @sanzxcode/libsignal-node (npm) GHSA-q649-w96f-433p, MAL-2026-1122 | Malicious | Not scored | 02 Mar, 2026 | npm @sanzxcode/libsignal-node |
Malicious release: Malicious code in @daffadeveloper/baileys (npm) GHSA-6f99-hrgr-8q4r, MAL-2026-1117 | Malicious | Not scored | 02 Mar, 2026 | npm @daffadeveloper/baileys |
Malicious release: Malicious code in @daffadeveloper/libsignal-node (npm) GHSA-m3xr-v9g3-m4pp, MAL-2026-1118 | Malicious | Not scored | 02 Mar, 2026 | npm @daffadeveloper/libsignal-node |
Malicious release: Malicious code in danzxz (npm) GHSA-58fh-489v-mr28, MAL-2026-1129 | Malicious | Not scored | 02 Mar, 2026 | npm danzxz |
Malicious release: Malicious code in ngaturkids (npm) GHSA-5vg4-hrfg-7vvv, MAL-2026-1131 | Malicious | Not scored | 02 Mar, 2026 | npm ngaturkids |