Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Parse Server has a password reset token single-use bypass via concurrent requests BIT-parse-2026-32943, CVE-2026-32943, GHSA-r3xq-68wh-gwvh | Low | 0.2% | 17 Mar, 2026 | npm parse-server |
Next.js: null origin can bypass dev HMR websocket CSRF checks CVE-2026-27977, GHSA-jcc7-9wpm-mj36 | Low | 0.2% | 17 Mar, 2026 | npm next |
StudioCMS REST getUsers Exposes Owner Account Records to Admin Tokens CVE-2026-32638, GHSA-xvf4-ch4q-2m24 | Low | 0.4% | 16 Mar, 2026 | npm studiocms |
XSS in @leanprover/unicode-input-component CVE-2026-32732, GHSA-6ggm-pwr9-r5h2 | Low | 0.3% | 16 Mar, 2026 | npm @leanprover/unicode-input-component |
OpenClaw: Unavailable local auth SecretRefs could fall through to remote credentials in local mode CVE-2026-32970, GHSA-qvr7-g57c-mrc7 | Low | 0.1% | 13 Mar, 2026 | npm openclaw |
Sveltejs devalue's `devalue.parse` and `devalue.unflatten` emit objects with `__proto__` own properties GHSA-mwv9-gp5h-frr4 | Low | Not scored | 12 Mar, 2026 | npm devalue |
@backstage/plugin-auth-backend: SSRF in experimental CIMD metadata fetch CVE-2026-32236, GHSA-qp4c-xg64-7c6x | Low | 0.3% | 12 Mar, 2026 | npm @backstage/plugin-auth-backend |
Keycloak vulnerable to authorization bypass via the Admin API BIT-keycloak-2026-2366, CVE-2026-2366, GHSA-r8jr-wg88-fq5c | Low | 0.3% | 12 Mar, 2026 | Maven org.keycloak:keycloak-js-admin-client npm @keycloak/keycloak-admin-client |
@whyour/qinglong: manipulation of the argument command leads to protection mechanism failure CVE-2026-3965, GHSA-xj37-qjg2-xwv2 | Low | 0.5% | 12 Mar, 2026 | npm @whyour/qinglong |
OpenClaw: system.run wrapper-depth boundary could skip shell approval gating CVE-2026-27183, GHSA-r6qf-8968-wj9q | Low | 0.1% | 09 Mar, 2026 | npm openclaw |
Mercurius's queryDepth limit bypassed for WebSocket subscriptions CVE-2026-30241, GHSA-m4h2-mjfm-mp55 | Low | 0.4% | 06 Mar, 2026 | npm mercurius |
defuddle vulnerable to XSS via unescaped string interpolation in _findContentBySchemaText image tag CVE-2026-30830, GHSA-5mq8-78gm-pjmq | Low | 0.3% | 06 Mar, 2026 | npm defuddle |
Backstage vulnerable to potential reading of SCM URLs using built in token CVE-2026-29185, GHSA-95v5-prp4-5gv5 | Low | 0.4% | 05 Mar, 2026 | npm @backstage/integration |
OpenClaw has cross-account DM pairing authorization bypass via unscoped pairing store access CVE-2026-32067, GHSA-vjp8-wprm-2jw9 | Low | 0.2% | 04 Mar, 2026 | npm openclaw |
Dark Reader gives users the ability to request style sheets from local web servers CVE-2025-68467, GHSA-x369-mcw8-8rvj | Low | 0.1% | 04 Mar, 2026 | npm darkreader |
OpenClaw's tools.exec.safeBins generic fallback allowed interpreter-style inline payload execution in allowlist mode GHSA-8mf7-vv8w-hjr2 | Low | Not scored | 03 Mar, 2026 | npm openclaw |
OpenClaw's voice-call Twilio replay dedupe now bound to authenticated webhook identity GHSA-gcj7-r3hg-m7w6 | Low | Not scored | 03 Mar, 2026 | npm openclaw |
OpenClaw: Microsoft Teams media fetch paths bypass shared SSRF guard model GHSA-7qf6-h84j-8fq4 | Low | Not scored | 03 Mar, 2026 | npm openclaw |
OpenClaw's runtime /debug override path accepted prototype-reserved keys CVE-2026-27524, GHSA-62f6-mrcj-v8h5 | Low | 0.2% | 03 Mar, 2026 | npm openclaw |
OpenClaw Vulnerable to HTML injection via unvalidated image MIME type in data-URL interpolation CVE-2026-32040, GHSA-2ww6-868g-2c56 | Low | 0.2% | 03 Mar, 2026 | npm openclaw |
mailparser vulnerable to Cross-site Scripting CVE-2026-3455, GHSA-7gmj-h9xc-mcxc | Low | 0.3% | 03 Mar, 2026 | npm mailparser |
@tootallnate/once vulnerable to Incorrect Control Flow Scoping CVE-2026-3449, GHSA-vpq2-c234-7xj6 | Low | 0.1% | 03 Mar, 2026 | npm @tootallnate/once |
OpenClaw Node system.run approval context-binding weakness in approval-enabled host=node flows CVE-2026-32058, GHSA-hjvp-qhm6-wrh2 | Low | 0.2% | 02 Mar, 2026 | npm openclaw |
OpenClaw has Signal group allowlist authorization bypass via DM pairing-store leakage CVE-2026-31991, GHSA-wm8r-w8pf-2v6w | Low | 0.2% | 02 Mar, 2026 | npm openclaw |
NocoDB has Plaintext Storage of Shared View Passwords CVE-2026-28360, GHSA-mpp2-x7wv-38hv | Low | 0.2% | 02 Mar, 2026 | npm nocodb |
NocoDB Vulnerable to User Enumeration via Password Reset Endpoint CVE-2026-28358, GHSA-387m-j3p9-3php | Low | 0.7% | 02 Mar, 2026 | npm nocodb |
fast-xml-parser has stack overflow in XMLBuilder with preserveOrder CVE-2026-27942, GHSA-fj3w-jwp8-x2g3 | Low | 0.5% | 26 Feb, 2026 | npm fast-xml-parser |
ENS DNSSEC Oracle Vulnerable to RSA Signature Forgery via Missing PKCS#1 v1.5 Padding Validation CVE-2026-22866, GHSA-c6rr-7pmc-73wc | Low | 0.2% | 25 Feb, 2026 | npm @ensdomains/ens-contracts |
OpenClaw Discord moderation authorization used untrusted sender identity in tool-driven flows CVE-2026-27484, GHSA-wh94-p5m6-mr7j | Low | 0.2% | 20 Feb, 2026 | npm openclaw |
OpenClaw safeBins stdin-only bypass via sort output and recursive grep flags CVE-2026-31996, GHSA-4685-c5cp-vp95 | Low | 0.1% | 19 Feb, 2026 | npm openclaw |
devalue affected by CPU and memory amplification from sparse arrays GHSA-33hq-fvwr-56pm | Low | Not scored | 19 Feb, 2026 | npm devalue |
devalue `uneval`ed code can create objects with polluted prototypes when `eval`ed GHSA-8qm3-746x-r74r | Low | Not scored | 19 Feb, 2026 | npm devalue |
Malicious release: Unauthorized npm publish of cline@2.3.0 with modified postinstall script GHSA-9ppg-jx86-fqw7, MAL-2026-1380 | MaliciousLow | Not scored | 19 Feb, 2026 | npm cline |
OpenClaw Google Chat spoofing access with allowlist authorized mutable email principal despite sender-ID mismatch GHSA-chm2-m3w2-wcxm | Low | Not scored | 17 Feb, 2026 | npm clawdbot npm openclaw |
OpenClaw log poisoning (indirect prompt injection) via WebSocket headers GHSA-g27f-9qjv-22pm | Low | Not scored | 17 Feb, 2026 | npm openclaw |
OpenClaw Affected by Remote Code Execution via System Prompt Injection in Slack Channel Descriptions CVE-2026-24764, GHSA-782p-5fr5-7fj8 | Low | 0.2% | 17 Feb, 2026 | npm openclaw |
xcode-mcp-server vulnerable to Command Injection CVE-2026-2178, GHSA-84fx-pwf3-7777 | Low | 3.8% | 08 Feb, 2026 | npm xcode-mcp-server |
Claude Code has Permission Deny Bypass Through Symbolic Links CVE-2026-25724, GHSA-4q92-rfm6-2cqx | Low | 0.5% | 06 Feb, 2026 | npm @anthropic-ai/claude-code |
webpack buildHttp: allowedUris allow-list bypass via URL userinfo (@) leading to build-time SSRF behavior CVE-2025-68458, GHSA-8fgc-7cc6-rx7x | Low | 0.2% | 05 Feb, 2026 | npm webpack |
webpack buildHttp HttpUriPlugin allowedUris bypass via HTTP redirects → SSRF + cache persistence CVE-2025-68157, GHSA-38r7-794h-5758 | Low | 0.2% | 05 Feb, 2026 | npm webpack |
Qwik City Open Redirect via fixTrailingSlash CVE-2026-25149, GHSA-92j7-wgmg-f32m | Low | 0.3% | 03 Feb, 2026 | npm @builder.io/qwik-city |
Fastify Vulnerable to DoS via Unbounded Memory Allocation in sendWebStream CVE-2026-25224, GHSA-mrq3-vjjr-p77c | Low | 0.6% | 02 Feb, 2026 | npm fastify |
Vendure vulnerable to timing attack that enables user enumeration in NativeAuthenticationStrategy CVE-2026-25050, GHSA-6f65-4fv2-wwch | Low | 0.4% | 30 Jan, 2026 | npm @vendure/core |
Backstage has a Possible SSRF when reading from allowed URL's in `backend.reading.allow` CVE-2026-24048, GHSA-q2x5-4xjx-c6p9 | Low | 0.2% | 21 Jan, 2026 | npm @backstage/backend-defaults |
Lobe Chat has IDOR in Knowledge Base File Removal that Allows Cross User File Deletion CVE-2026-23522, GHSA-j7xp-4mg9-x28r | Low | 0.2% | 19 Jan, 2026 | npm @lobehub/chat |
Open Chinese Convert has Out-of-bounds Write CVE-2025-15536, GHSA-5pr6-crvp-2j9f | Low | 0.3% | 18 Jan, 2026 | npm opencc |
jsdiff has a Denial of Service vulnerability in parsePatch and applyPatch CVE-2026-24001, GHSA-73rr-hh4g-fpgx | Low | 0.6% | 14 Jan, 2026 | npm diff |
QuestDB UI's Web Console is Vulnerable to Cross-Site Scripting CVE-2026-0824, GHSA-xf94-h87h-g9wr | Low | 0.3% | 10 Jan, 2026 | npm @questdb/web-console |
JavaScript SDK v2 users should add validation to the region parameter value in or migrate to v3 GHSA-j965-2qgj-vjmq | Low | Not scored | 08 Jan, 2026 | npm aws-sdk |
AWS SDK for JavaScript v3 adopted defense in depth enhancement for region parameter value GHSA-6475-r3vj-m8vf | Low | Not scored | 08 Jan, 2026 | npm @smithy/config-resolver |