Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Network-AI: Improper Neutralization of Special Elements used in an OS Command CVE-2026-54051, GHSA-qw6v-5fcf-5666 | Critical | 0.5% | 19 Jun, 2026 | npm network-ai |
deepstream is vulnerable to prototype pollution CVE-2026-49252, GHSA-9v98-6g37-x9g6 | Critical | 0.5% | 18 Jun, 2026 | npm @deepstream/server |
@acastellon/auth: Authentication bypass via spoofable headers in validateToken() CVE-2026-58399, GHSA-gfj5-979r-92pw | Critical | 1.0% | 18 Jun, 2026 | npm @acastellon/auth |
npm PraisonAI MCPServer exposes unauthenticated HTTP tools/call CVE-2026-57139, GHSA-j4f3-55x4-r6q2 | Critical | 0.8% | 18 Jun, 2026 | npm praisonai |
npm PraisonAI AgentOS exposes unauthenticated agent listing and invocation CVE-2026-57140, GHSA-9752-mhqh-h34f | Critical | 0.6% | 18 Jun, 2026 | npm praisonai |
PraisonAI: Remote Code Execution via Sandbox Escape in `codeMode` Tool CVE-2026-57141, GHSA-p69m-4f92-2v84 | Critical | 0.7% | 18 Jun, 2026 | npm praisonai |
npm PraisonAI codeMode sandbox escape via Function constructor CVE-2026-57138, GHSA-vmmj-pfw7-fjwp | Critical | 0.7% | 18 Jun, 2026 | npm praisonai |
Network-AI: CVE-2026-46701 fix incomplete — empty default secret still authorizes all requests CVE-2026-48814, GHSA-r78r-rwrf-rjwp | Critical | 0.4% | 17 Jun, 2026 | npm network-ai |
Backpropagate: backprop ui --auth and backprop ui --share do not enforce authentication CVE-2026-48797, GHSA-f65r-h4g3-3h9h, PYSEC-2026-291 | Critical | 0.3% | 17 Jun, 2026 | PyPI backpropagate npm @mcptoolshop/backpropagate |
LobeHub: Unauthenticated SSRF in `/webapi/proxy` CVE-2026-54157, GHSA-xmwj-c75x-6346 | Critical | 1.8% | 16 Jun, 2026 | npm @lobehub/lobehub |
i18next-http-middleware: MissingKeyHandler does not reject keys whose segments contain prototype-polluting names CVE-2026-48714, GHSA-f49m-vf83-692w | Critical | 0.5% | 15 Jun, 2026 | npm i18next-http-middleware |
i18next-fs-backend vulnerable to prototype pollution via crafted missing-key string CVE-2026-48713, GHSA-2933-q333-qg83 | Critical | 0.5% | 15 Jun, 2026 | npm i18next-fs-backend |
Electron: Buffer performs incorrect byte length calculations resulting in heap buffer under/overflow CVE-2026-54257, GHSA-q6m5-f73j-m9mc | Critical | 0.4% | 15 Jun, 2026 | npm electron |
YouTransfer has an issue in the sendmail transport integration that allows arbitrary code execution CVE-2026-50880, GHSA-68mc-h6h8-79wj | Critical | 0.5% | 15 Jun, 2026 | npm youtransfer |
Remotion: arbitrary file write vulnerability CVE-2026-30121, GHSA-g6pc-6676-c23j | Critical | 0.3% | 15 Jun, 2026 | npm remotion |
Remotion: remote code execution (RCE) vulnerability CVE-2026-30120, GHSA-2jqp-f4gr-44fr | Critical | 0.8% | 15 Jun, 2026 | npm remotion |
Vitest Browser: Exposed Browser Mode API Can Proxy CDP and Overwrite Config Files, Leading to RCE CVE-2026-53633, GHSA-g8mr-85jm-7xhm | Critical | 0.9% | 15 Jun, 2026 | npm @vitest/browser npm vite-plus |
Apostrophe has Server-Side Prototype Pollution in apos.util.set via patch operators that leads to process-wide authorization bypass CVE-2026-53609, GHSA-6h5j-32cf-4253 | Critical | 0.3% | 12 Jun, 2026 | npm apostrophe |
Baileys has message upsert / hist sync spoofing and app state corruption when using maliciously crafted protocolMessage payload CVE-2026-48063, GHSA-qvv5-jq5g-4cgg | Critical | 0.2% | 10 Jun, 2026 | npm @whiskeysockets/baileys npm baileys |
Cordova Plugin InAppBrowser: iOS: Arbitrary Cordova callback IDs can be dispatched without validation from InAppBrowser WebViews. CVE-2026-47430, GHSA-q42j-x8rq-pjg6 | Critical | 0.7% | 08 Jun, 2026 | npm cordova-plugin-inappbrowser |
Authenticated Remote Code Execution via loadReader functionName code injection in DbGate CVE-2026-47670, GHSA-wm5r-5qp3-5vxf | Critical | 1.8% | 05 Jun, 2026 | npm dbgate-api |
DbGate: Zip Slip in archive/unzip allows arbitrary file write leading to RCE CVE-2026-47669, GHSA-h535-j5hr-mv56 | Critical | 0.5% | 05 Jun, 2026 | npm dbgate |
DbGate: Unauthenticated Remote Code Execution via JSON Script Runner CVE-2026-47668, GHSA-8v3q-9vmx-36vc | Critical | 3.9% | 05 Jun, 2026 | npm dbgate-serve |
Supply chain compromise via malicious @cap-js/openapi GHSA-jpvj-wpmj-h7rv | Critical | Not scored | 04 Jun, 2026 | npm @cap-js/openapi |
Vitest browser mode serves unsanitized otelCarrier query parameter as inline script CVE-2026-47428, GHSA-2h32-95rg-cppp | Critical | 0.6% | 01 Jun, 2026 | npm @vitest/browser |
When Vitest UI server is listening, arbitrary file can be read and executed CVE-2026-47429, GHSA-5xrq-8626-4rwp | Critical | 0.9% | 01 Jun, 2026 | npm vitest |
NodeVM builtin denylist bypass via process and inspector/promises allows host code execution CVE-2026-47140, GHSA-rp36-8xq3-r6c4 | Critical | 1.0% | 29 May, 2026 | npm vm2 |
vm2 sandbox escape via JSPI-backed Promise `.finally()` species bypass CVE-2026-47210, GHSA-6j2x-vhqr-qr7q | Critical | 1.7% | 29 May, 2026 | npm vm2 |
vm2 has a CVE-2023-37903 patch bypass: nesting:true without explicit require still allows full RCE CVE-2026-47137, GHSA-m4wx-m65x-ghrr | Critical | 0.4% | 29 May, 2026 | npm vm2 |
vm2 is Vulnerable to Sandbox Breakout Through Promise Species CVE-2026-47208, GHSA-76w7-j9cq-rx2j | Critical | 1.0% | 29 May, 2026 | npm vm2 |
vm2 has a Sandbox Escape issue CVE-2026-47131, GHSA-v6mx-mf47-r5wg | Critical | 0.8% | 29 May, 2026 | npm vm2 |
OpenClaw: QQBot admin commands could skip DM-only and allowFrom policy CVE-2026-34507, GHSA-w4v6-g3wm-w36c | Critical | 0.1% | 29 May, 2026 | npm openclaw |
LiquidJS is Vulnerable to Remote Code Execution CVE-2026-45618, GHSA-gf2q-c269-pqgc | Critical | 0.8% | 27 May, 2026 | npm liquidjs |
Budibase: Workspace-scoped builder escalates to global admin via /api/public/v1/roles/assign CVE-2026-48150, GHSA-6xp4-cf37-ppjh | Critical | 0.3% | 27 May, 2026 | npm @budibase/server |
shell-quote quote() does not escape newlines in object .op values CVE-2026-9277, GHSA-w7jw-789q-3m8p | Critical | 0.8% | 22 May, 2026 | npm shell-quote |
Boxlite: Path Traversal Vulnerability Leads to Arbitrary File Write on the Host CVE-2026-46703, GHSA-f396-4rp4-7v2j, GO-2026-5344, PYSEC-2026-298, RUSTSEC-2026-0148 | Critical | 0.5% | 21 May, 2026 | Go github.com/boxlite-ai/boxlite/sdks/go PyPI boxlite crates.io boxlite crates.io boxlite-cli +1 more |
BoxLite: Permission Bypass Allows Modification of Read-Only Files CVE-2026-46695, GHSA-g6ww-w5j2-r7x3, GO-2026-5392, PYSEC-2026-299, RUSTSEC-2026-0147 | Critical | 0.3% | 21 May, 2026 | Go github.com/boxlite-ai/boxlite/sdks/go PyPI boxlite crates.io boxlite crates.io boxlite-cli +1 more |
@hulumi/policies: Stack-wide evidence bypassed Cloudflare and deployment-governance guardrails CVE-2026-82855, GHSA-59f3-7227-wmh4 | Critical | 0.6% | 21 May, 2026 | npm @hulumi/policies |
@hulumi/policies: GitHub OIDC trust policy bypass via AWS set-qualified condition operators CVE-2026-82856, GHSA-q2f7-m237-v562 | Critical | 0.5% | 21 May, 2026 | npm @hulumi/policies |
@hulumi/policies: CIS 1.16 admin policy bypass for inline and attached IAM policies CVE-2026-82860, GHSA-4xrh-5m3m-328w | Critical | 0.5% | 21 May, 2026 | npm @hulumi/policies |
@hulumi/drift: Orphan reconciler accepted externally supplied execute plans CVE-2026-82858, GHSA-2ffm-hxrq-qqmm | Critical | 0.3% | 21 May, 2026 | npm @hulumi/drift |
Supply chain compromise via malicious package versions (@cap-js/sqlite, @cap-js/postgres, @cap-js/db-service) CVE-2026-46421, GHSA-pvw4-cvr4-97p8 | Critical | 0.5% | 20 May, 2026 | npm @cap-js/db-service npm @cap-js/postgres npm @cap-js/sqlite |
Malicious code in @beproduct/nestjs-auth (0.1.2 through 0.1.19) — Mini Shai-Hulud worm CVE-2026-46412, GHSA-6xwp-cp5h-q856 | Critical | 0.8% | 19 May, 2026 | npm @beproduct/nestjs-auth |
9router: Unauthenticated Remote Code Execution via unprotected MCP custom plugin routes CVE-2026-46339, GHSA-fhh6-4qxv-rpqj | Critical | 2.8% | 19 May, 2026 | npm 9router |
Stored XSS via <iframe> in HAX CMS allows access to sensitive client-side data and account takeover CVE-2026-46396, GHSA-jh3h-rpxg-fr36 | Critical | 0.2% | 19 May, 2026 | npm @haxtheweb/haxcms-nodejs npm @haxtheweb/iframe-loader npm @haxtheweb/video-player |
HAXcms: Private Key Disclosure via Broken HMAC Implementation CVE-2026-46395, GHSA-6c8g-9hfh-pq5h | Critical | 0.3% | 19 May, 2026 | npm @haxtheweb/haxcms-nodejs |
HAX CMS: Stored XSS via '<video-player>' component allows arbitrary JavaScript execution and token theft CVE-2026-46496, GHSA-2m6p-hm3w-6jm3 | Critical | 0.2% | 19 May, 2026 | npm @haxtheweb/haxcms-nodejs npm @haxtheweb/video-player |
Malware in @opensearch-project/opensearch GHSA-27f5-xjrr-q9ff | Critical | Not scored | 19 May, 2026 | npm @opensearch-project/opensearch |
@samanhappy/mcphub: SSE Endpoint Accepts Arbitrary Username from URL Path Without Authentication, Enabling User Impersonation GHSA-wf8q-wvv8-p8jf | Critical | Not scored | 14 May, 2026 | npm @samanhappy/mcphub |
Electerm Local code through electerm's single-instance socket CVE-2026-45353, GHSA-7p5m-v798-f8vv | Critical | 0.1% | 14 May, 2026 | npm electerm |