Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
OpenClaw has a Matrix allowlist bypass via displayName and cross-homeserver localpart matching CVE-2026-28471, GHSA-rmxw-jxxx-4cpc | Medium | 0.3% | 17 Feb, 2026 | npm openclaw |
OpenClaw BlueBubbles webhook auth bypass via loopback proxy trust CVE-2026-26316, GHSA-pchc-86f6-8758 | High | 0.4% | 17 Feb, 2026 | npm @openclaw/bluebubbles npm openclaw |
OpenClaw optional voice-call plugin: webhook verification may be bypassed behind certain proxy configurations CVE-2026-28465, GHSA-3m3q-x3gj-f79x | High | 0.4% | 17 Feb, 2026 | npm @clawdbot/voice-call npm @openclaw/voice-call |
OpenClaw log poisoning (indirect prompt injection) via WebSocket headers GHSA-g27f-9qjv-22pm | Low | Not scored | 17 Feb, 2026 | npm openclaw |
OpenClaw's unauthenticated Nostr profile HTTP endpoints allow remote profile/config tampering CVE-2026-28450, GHSA-mv9j-6xhh-g383 | High | 0.4% | 17 Feb, 2026 | npm openclaw |
OpenClaw affected by SSRF via attachment/media URL hydration CVE-2026-28467, GHSA-wfp2-v9c7-fh79 | Medium | 0.5% | 17 Feb, 2026 | npm openclaw |
fast-xml-parser affected by DoS through entity expansion in DOCTYPE (no expansion limit) CVE-2026-26278, GHSA-jmr7-xgp7-cmfj | High | 0.9% | 17 Feb, 2026 | npm fast-xml-parser |
OpenClaw has a Telegram webhook request forgery (missing `channels.telegram.webhookSecret`) → auth bypass CVE-2026-25474, GHSA-mp5h-m6qj-6292 | High | 0.2% | 17 Feb, 2026 | npm openclaw |
OpenClaw Affected by Remote Code Execution via System Prompt Injection in Slack Channel Descriptions CVE-2026-24764, GHSA-782p-5fr5-7fj8 | Low | 0.2% | 17 Feb, 2026 | npm openclaw |
OpenClaw has a webhook auth bypass when gateway is behind a reverse proxy (loopback remoteAddress trust) CVE-2026-29613, GHSA-xc7w-v5x6-cc87 | High | 0.5% | 17 Feb, 2026 | npm openclaw |
OpenClaw affected by SSRF in Image Tool Remote Fetch GHSA-56f2-hvwg-5743 | High | Not scored | 17 Feb, 2026 | npm openclaw |
OpenClaw's Chrome extension relay binds publicly due to wildcard treated as loopback CVE-2026-28395, GHSA-qw99-grcx-4pvm | Medium | 0.5% | 17 Feb, 2026 | npm openclaw |
OpenClaw has an exec allowlist bypass via command substitution/backticks inside double quotes CVE-2026-28470, GHSA-3hcm-ggvf-rch5 | Critical | 0.6% | 17 Feb, 2026 | npm openclaw |
OpenClaw's Browser Relay /cdp websocket is missing auth which could allow cross-tab cookie access CVE-2026-28458, GHSA-mr32-vwc2-5j6h | High | 0.4% | 17 Feb, 2026 | npm moltbot npm openclaw |
OpenClaw's Windows cmd.exe parsing may bypass exec allowlist/approval gating CVE-2026-28391, GHSA-qj77-c3c8-9c3q | Critical | 0.6% | 17 Feb, 2026 | npm openclaw |
OpenClaw has an arbitrary transcript path file write via gateway sessionFile CVE-2026-28459, GHSA-64qx-vpxx-mvqf | High | 0.4% | 17 Feb, 2026 | npm openclaw |
OpenClaw Hook Session Key Override Enables Targeted Cross-Session Routing GHSA-hv93-r4j3-q65f | High | Not scored | 17 Feb, 2026 | npm openclaw |
OpenClaw's gateway connect could skip device identity checks when auth.token was present but not yet validated CVE-2026-28472, GHSA-rv39-79c4-7459 | Critical | 0.4% | 17 Feb, 2026 | npm openclaw |
BSV Blockchain SDK has an Authentication Signature Data Preparation Vulnerability CVE-2025-69287, GHSA-vjpq-xx5g-qvmm | Medium | 0.3% | 17 Feb, 2026 | npm @bsv/sdk |
Malicious release: Malicious code in vds-monarch (npm) GHSA-w2rp-7fhc-hmrm, MAL-2026-929 | Malicious | Not scored | 17 Feb, 2026 | npm vds-monarch |
Malicious release: Malicious code in realestate-ask (npm) GHSA-cq58-2656-w9f6, MAL-2026-944 | Malicious | Not scored | 17 Feb, 2026 | npm realestate-ask |
Malicious release: Malicious code in compass-e2e-tests (npm) GHSA-j29q-8q6j-p7rr, MAL-2026-922 | Malicious | Not scored | 16 Feb, 2026 | npm compass-e2e-tests |
Malicious release: Malicious code in ambar-src (npm) GHSA-qjgj-mrv7-24f7, MAL-2026-920 | Malicious | Not scored | 16 Feb, 2026 | npm ambar-src |
Malicious release: Malicious code in mds-webcomponents (npm) MAL-2026-919 | Malicious | Not scored | 16 Feb, 2026 | npm mds-webcomponents |
Malicious release: Malicious code in webpack-vite (npm) GHSA-pxqh-3wf7-xg38, MAL-2026-918 | Malicious | Not scored | 16 Feb, 2026 | npm webpack-vite |
Malicious release: Malicious code in @qualys/react-web (npm) MAL-2026-914 | Malicious | Not scored | 16 Feb, 2026 | npm @qualys/react-web |
Malicious release: Malicious code in ethereums-lint (npm) GHSA-25vw-q3mm-9qg8, MAL-2026-943 | Malicious | Not scored | 15 Feb, 2026 | npm ethereums-lint |
Malicious release: Malicious code in ethereum-lint (npm) GHSA-x56c-5jr9-m265, MAL-2026-942 | Malicious | Not scored | 15 Feb, 2026 | npm ethereum-lint |
Malicious release: Malicious code in hops-preset-jest (npm) GHSA-hgp2-cp4x-f69q, MAL-2026-908 | Malicious | Not scored | 15 Feb, 2026 | npm hops-preset-jest |
Cloudflare Agents has a Reflected Cross-Site Scripting (XSS) vulnerability in AI Playground site GHSA-w5cr-2qhr-jqc5 | Medium | Not scored | 13 Feb, 2026 | npm agents |
Child processes spawned by Renovate incorrectly have full access to environment variables CVE-2026-76227, GHSA-8wc6-vgrq-x6cf | Medium | 0.2% | 13 Feb, 2026 | npm renovate |
Malicious release: Malicious code in sinon-web3-chain (npm) GHSA-r5gp-3j8c-8rpr, MAL-2026-896 | Malicious | Not scored | 13 Feb, 2026 | npm sinon-web3-chain |
Malicious release: Malicious code in json-mapping-src (npm) GHSA-vc3m-m5cg-4h7m, MAL-2026-895 | Malicious | Not scored | 13 Feb, 2026 | npm json-mapping-src |
beautiful-mermaid contains an SVG attribute injection issue that can lead to cross-site scripting (XSS) CVE-2026-26226, GHSA-cgmm-x5ww-q5cr | Medium | 0.6% | 13 Feb, 2026 | npm beautiful-mermaid |
Malicious release: Malicious code in contosoapp (npm) GHSA-67mx-f364-8rpr, MAL-2026-881 | Malicious | Not scored | 13 Feb, 2026 | npm contosoapp |
Malicious release: Malicious code in responsible-ai (npm) GHSA-6rqj-6g7j-8mgh, MAL-2026-890 | Malicious | Not scored | 13 Feb, 2026 | npm responsible-ai |
Malicious release: Malicious code in codexworld (npm) GHSA-fpff-jvx6-7wxw, MAL-2026-879 | Malicious | Not scored | 13 Feb, 2026 | npm codexworld |
Malicious release: Malicious code in responses-starter-app (npm) GHSA-2gw2-3gjc-c357, MAL-2026-889 | Malicious | Not scored | 13 Feb, 2026 | npm responses-starter-app |
Malicious release: Malicious code in pyrefly (npm) GHSA-2mj4-8c65-f5p4, MAL-2026-887 | Malicious | Not scored | 13 Feb, 2026 | npm pyrefly |
Malicious release: Malicious code in pyright-root (npm) GHSA-j4q3-7f72-hm94, MAL-2026-888 | Malicious | Not scored | 13 Feb, 2026 | npm pyright-root |
Malicious release: Malicious code in ecosystem_ui (npm) GHSA-rfm3-w7v3-89mx, MAL-2026-883 | Malicious | Not scored | 13 Feb, 2026 | npm ecosystem_ui |
Malicious release: Malicious code in open-answer-engine-frontend (npm) GHSA-vwq3-gg4r-gq8g, MAL-2026-886 | Malicious | Not scored | 13 Feb, 2026 | npm open-answer-engine-frontend |
Malicious release: Malicious code in hxz-protection (npm) GHSA-r49f-jwqc-c4pr, MAL-2026-884 | Malicious | Not scored | 13 Feb, 2026 | npm hxz-protection |
Malicious release: Malicious code in wropz-6module (npm) GHSA-m2hg-26pv-w27r, MAL-2026-891 | Malicious | Not scored | 13 Feb, 2026 | npm wropz-6module |
Malicious release: Malicious code in wropz-module (npm) GHSA-8vvw-57pj-xxfv, MAL-2026-892 | Malicious | Not scored | 13 Feb, 2026 | npm wropz-module |
Malicious release: Malicious code in metadata-stripper (npm) GHSA-8r3c-vhmx-vmwr, MAL-2026-885 | Malicious | Not scored | 13 Feb, 2026 | npm metadata-stripper |
Malicious release: Malicious code in xsstesting (npm) GHSA-f2r4-9pvw-jg83, MAL-2026-893 | Malicious | Not scored | 13 Feb, 2026 | npm xsstesting |
Malicious release: Malicious code in console-style-pro0o0o0o (npm) GHSA-r4v3-x2p5-xc5v, MAL-2026-880 | Malicious | Not scored | 13 Feb, 2026 | npm console-style-pro0o0o0o |
Malicious release: Malicious code in despicable-me (npm) GHSA-w8vg-4rq2-wh29, MAL-2026-882 | Malicious | Not scored | 13 Feb, 2026 | npm despicable-me |
Cloudflare Agents is Vulnerable to Reflected Cross-Site Scripting in the AI Playground's OAuth callback handler CVE-2026-1721, GHSA-cvhv-6xm6-c3v4 | Medium | 0.4% | 13 Feb, 2026 | npm agents |