Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
minimatch has a ReDoS via repeated wildcards with non-matching literal in pattern CVE-2026-26996, GHSA-3ppc-4f35-3m26 | High | 0.6% | 18 Feb, 2026 | npm minimatch |
Command Injection via Unsanitized `locate` Output in `versions()` — systeminformation CVE-2026-26318, GHSA-5vv4-hvf7-2h46 | High | 1.3% | 18 Feb, 2026 | npm systeminformation |
Systeminformation has a Command Injection via unsanitized interface parameter in wifi.js retry path CVE-2026-26280, GHSA-9c88-49p5-5ggf | High | 1.4% | 18 Feb, 2026 | npm systeminformation |
Ghost has a SQL injection in Content API BIT-ghost-2026-26980, CVE-2026-26980, GHSA-w52v-v783-gw97 | Critical | 71.1% | 18 Feb, 2026 | npm ghost |
Improper Control of Generation of Code ('Code Injection') in @tygo-van-den-hurk/slyde CVE-2026-26974, GHSA-w7h5-55jg-cq2f | High | 0.6% | 18 Feb, 2026 | npm @tygo-van-den-hurk/slyde |
Malicious release: Malicious code in ui5-cap-event-app-server (npm) MAL-2026-945 | Malicious | Not scored | 18 Feb, 2026 | npm ui5-cap-event-app-server |
OpenClaw has an authentication bypass in sandbox browser bridge server CVE-2026-28468, GHSA-h9g4-589h-68xv | High | 0.2% | 18 Feb, 2026 | npm openclaw |
OpenClaw has two SSRF via sendMediaFeishu and markdown image fetching in Feishu extension CVE-2026-28451, GHSA-x22m-j5qq-j49m | High | 0.3% | 18 Feb, 2026 | npm openclaw |
OpenClaw has a LFI in BlueBubbles media path handling CVE-2026-29611, GHSA-rwj8-p9vq-25gv | High | 0.3% | 18 Feb, 2026 | npm openclaw |
OpenClaw: Process Safety - Unvalidated PID Kill via SIGKILL in Process Cleanup CVE-2026-27486, GHSA-jfv4-h8mc-jcp8 | Medium | 0.3% | 18 Feb, 2026 | npm openclaw |
OpenClaw Chutes manual OAuth state validation bypass can cause credential substitution CVE-2026-28477, GHSA-7rcp-mxpq-72pj | Medium | 0.2% | 18 Feb, 2026 | npm openclaw |
OpenClaw: Prevent shell injection in macOS keychain credential write CVE-2026-27487, GHSA-4564-pvr2-qq4h | High | 1.4% | 18 Feb, 2026 | npm openclaw |
OpenClaw has a path traversal in browser trace/download output paths may allow arbitrary file writes CVE-2026-28462, GHSA-gq9c-wg68-gwj2 | High | 0.5% | 18 Feb, 2026 | npm openclaw |
OpenClaw has a Path Traversal in Browser Download Functionality CVE-2026-26972, GHSA-xwjm-j929-xq7c | Medium | 0.2% | 18 Feb, 2026 | npm openclaw |
Malicious release: Malicious code in abcxyzz (npm) MAL-2026-940 | Malicious | Not scored | 18 Feb, 2026 | npm abcxyzz |
OpenClaw affected by potential code execution via unsafe hook module path handling in Gateway CVE-2026-28456, GHSA-v6c6-vqqg-w888 | High | 0.5% | 18 Feb, 2026 | npm openclaw |
OpenClaw's unsanitized session ID enables path traversal in transcript file operations CVE-2026-28482, GHSA-5xfq-5mr7-426q | High | 0.2% | 18 Feb, 2026 | npm openclaw |
Arbitrary File Read/Write via Hardlink Target Escape Through Symlink Chain in node-tar Extraction CVE-2026-26960, GHSA-83g3-92jg-28cx | High | 0.3% | 18 Feb, 2026 | npm tar |
OpenClaw inter-session prompts could be treated as direct user instructions GHSA-w5c7-9qqw-6645 | High | Not scored | 18 Feb, 2026 | npm openclaw |
OpenClaw: Command hijacking via unsafe PATH handling (bootstrapping + node-host PATH overrides) CVE-2026-29610, GHSA-jqpq-mgvm-f9r6 | High | 0.5% | 18 Feb, 2026 | npm openclaw |
OpenClaw affected by SSRF in optional Tlon (Urbit) extension authentication CVE-2026-28476, GHSA-pg2v-8xwh-qhcc | Medium | 0.3% | 18 Feb, 2026 | npm openclaw |
OpenClaw Twilio voice-call webhook auth bypass when ngrok loopback compatibility is enabled CVE-2026-29606, GHSA-c37p-4qqg-3p76 | Medium | 0.3% | 18 Feb, 2026 | npm openclaw |
OpenClaw Telegram allowlist authorization accepted mutable usernames CVE-2026-28480, GHSA-mj5r-hh7j-4gxf | Medium | 0.2% | 18 Feb, 2026 | npm clawdbot npm openclaw |
OpenClaw Google Chat shared-path webhook target ambiguity allowed cross-account policy-context misrouting CVE-2026-28469, GHSA-rq6g-px6m-c248 | High | 0.3% | 18 Feb, 2026 | npm clawdbot npm openclaw |
OpenClaw affected by cross-site request forgery (CSRF) through loopback browser mutation endpoints CVE-2026-26317, GHSA-3fqr-4cg8-h96q | High | 0.2% | 18 Feb, 2026 | npm clawdbot npm openclaw |
OpenClaw affected by denial of service via unbounded webhook request body buffering CVE-2026-28478, GHSA-q447-rj3r-2cgh | High | 0.5% | 18 Feb, 2026 | npm clawdbot npm openclaw |
OpenClaw affected by denial of service through unguarded archive extraction allowing high expansion/resource abuse (ZIP/TAR) CVE-2026-28452, GHSA-h89v-j3x9-8wqj | Medium | 0.4% | 18 Feb, 2026 | npm clawdbot npm openclaw |
OpenClaw: denial of service through large base64 media files allocating large buffers before limit checks CVE-2026-29612, GHSA-w2cg-vxx6-5xjg | Medium | 0.3% | 18 Feb, 2026 | npm clawdbot npm openclaw |
OpenClaw affected by denial of service via unbounded URL-backed media fetch CVE-2026-29609, GHSA-j27p-hq53-9wgc | High | 0.5% | 18 Feb, 2026 | npm openclaw |
OpenClaw Slack: dmPolicy=open allowed any DM sender to run privileged slash commands CVE-2026-28392, GHSA-v773-r54f-q32w | High | 0.4% | 18 Feb, 2026 | npm openclaw |
OpenClaw exec approvals: safeBins could bypass stdin-only constraints via shell expansion CVE-2026-28463, GHSA-xvhf-x56f-2hpp | High | 0.2% | 18 Feb, 2026 | npm openclaw |
OpenClaw has a command injection in maintainer clawtributors updater CVE-2026-26323, GHSA-m7x8-2w3w-pr42 | High | 1.9% | 18 Feb, 2026 | npm openclaw |
OpenClaw has a path traversal in browser upload allows local file read CVE-2026-26329, GHSA-cv7m-c9jx-vg7q | High | 0.5% | 18 Feb, 2026 | npm openclaw |
OpenClaw iMessage group allowlist authorization inherited DM pairing-store identities CVE-2026-26328, GHSA-g34w-4xqq-h79m | Medium | 0.3% | 18 Feb, 2026 | npm clawdbot npm openclaw |
OpenClaw allows unauthenticated discovery TXT records to steer routing and TLS pinning CVE-2026-26327, GHSA-pv58-549p-qh99 | High | 0.1% | 18 Feb, 2026 | npm openclaw |
OpenClaw Google Chat spoofing access with allowlist authorized mutable email principal despite sender-ID mismatch GHSA-chm2-m3w2-wcxm | Low | Not scored | 17 Feb, 2026 | npm clawdbot npm openclaw |
OpenClaw skills.status could leak secrets to operator.read clients CVE-2026-26326, GHSA-8mh7-phf8-xgfm | Medium | 0.3% | 17 Feb, 2026 | npm openclaw |
OpenClaw Node host system.run rawCommand/command mismatch can bypass allowlist/approvals CVE-2026-26325, GHSA-h3f9-mjwj-w476 | High | 0.6% | 17 Feb, 2026 | npm openclaw |
OpenClaw has a SSRF guard bypass via full-form IPv4-mapped IPv6 (loopback / metadata reachable) CVE-2026-26324, GHSA-jrvc-8ff5-2f9f | High | 0.4% | 17 Feb, 2026 | npm openclaw |
OpenClaw Gateway tool allowed unrestricted gatewayUrl override CVE-2026-26322, GHSA-g6q9-8fvw-f7rf | High | 0.4% | 17 Feb, 2026 | npm openclaw |
OpenClaw has a local file disclosure via sendMediaFeishu in Feishu extension CVE-2026-26321, GHSA-8jpq-5h99-ff5r | High | 0.5% | 17 Feb, 2026 | npm openclaw |
OpenClaw macOS deep link confirmation truncation can conceal executed agent message CVE-2026-26320, GHSA-7q2j-c4q5-rm27 | High | 0.5% | 17 Feb, 2026 | npm openclaw |
OpenClaw is Missing Webhook Authentication in Telnyx Provider Allows Unauthenticated Requests CVE-2026-26319, GHSA-4hg8-92x6-h2f3 | High | 0.3% | 17 Feb, 2026 | npm openclaw |
OpenClaw has a Path Traversal in Plugin Installation CVE-2026-28447, GHSA-qrq5-wjgg-rvqw | High | 0.4% | 17 Feb, 2026 | npm openclaw |
OpenClaw authorization bypass: operator.write can resolve exec approvals via chat.send -> /approve CVE-2026-28473, GHSA-mqpw-46fh-299h | High | 0.3% | 17 Feb, 2026 | npm openclaw |
OpenClaw MS Teams inbound attachment downloader leaks bearer tokens to allowlisted suffix domains CVE-2026-28481, GHSA-7vwx-582j-j332 | Medium | 0.3% | 17 Feb, 2026 | npm openclaw |
OpenClaw Twitch allowFrom is not enforced in optional plugin, unauthorized chat users can trigger agent pipeline CVE-2026-28448, GHSA-33rq-m5x2-fvgf | High | 0.5% | 17 Feb, 2026 | npm openclaw |
OpenClaw has an inbound allowlist policy bypass in voice-call extension (empty caller ID + suffix matching) CVE-2026-28446, GHSA-4rj2-gpmh-qq5x | Critical | 0.7% | 17 Feb, 2026 | npm openclaw |
Nextcloud Talk allowlist bypass via actor.name display name spoofing CVE-2026-28474, GHSA-r5h9-vjqc-hq3r | Critical | 0.6% | 17 Feb, 2026 | npm @openclaw/nextcloud-talk |
OpenClaw has a potential access-group authorization bypass if channel type lookup fails CVE-2026-28454, GHSA-fhvm-j76f-qmjv | Critical | 0.3% | 17 Feb, 2026 | npm openclaw |