Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
DeepSeek TUI: run_tests Tool Enables RCE via Malicious Repository Without Approval CVE-2026-45311, GHSA-wx44-2q6h-j6p8 | Critical | 0.6% | 14 May, 2026 | crates.io deepseek-tui crates.io deepseek-tui-cli npm deepseek-tui |
Electerm: Importing unsafe bookmark data could lead to unsafe operation when clicking local type bookmark CVE-2026-45058, GHSA-jgg9-rw32-44pj | Critical | 0.2% | 14 May, 2026 | npm electerm |
Apostrophe has default XSS via `xmp` raw-text passthrough in `sanitize-html` CVE-2026-44990, GHSA-rpr9-rxv7-x643 | Critical | 0.7% | 14 May, 2026 | npm sanitize-html |
n8n Has an XML Node Prototype Pollution Patch Bypass CVE-2026-44791, GHSA-wrwr-h859-xh2r | Critical | 0.5% | 14 May, 2026 | npm n8n |
n8n Has an Arbitrary File Read via Git Node CVE-2026-44790, GHSA-57g9-58c2-xjg3 | Critical | 0.5% | 14 May, 2026 | npm n8n |
n8n: HTTP Request Node Pagination Prototype Pollution to RCE CVE-2026-44789, GHSA-c8xv-5998-g76h | Critical | 0.5% | 14 May, 2026 | npm n8n |
FlowiseAI: Authenticated Host RCE via POST /api/v1/node-custom-function and NodeVM Sandbox Escape CVE-2026-46442, GHSA-9rvc-vf7m-pgm2 | Critical | 36.3% | 14 May, 2026 | npm flowise |
FlowiseAI Exposes Basic Auth Credentials via API CVE-2026-46440, GHSA-php6-83fg-gw3g | Critical | 0.3% | 14 May, 2026 | npm flowise |
Strapi may leak sensitive data via relational filtering due to lack of query sanitization CVE-2026-27886, GHSA-rjg2-95x7-8qmx | Critical | 1.9% | 14 May, 2026 | npm @strapi/strapi |
Strapi Vulnerable to SQL Injection in Content Type Builder CVE-2026-22599, GHSA-3xcq-8mjw-h6mx | Critical | 1.2% | 13 May, 2026 | npm @strapi/content-type-builder npm @strapi/plugin-content-type-builder |
vm2 Has a Sandbox Breakout Using Async Generator CVE-2026-45411, GHSA-248r-7h7q-cr24 | Critical | 0.6% | 13 May, 2026 | npm vm2 |
SillyTavern has a Path Traversal issue CVE-2026-44650, GHSA-886q-f44j-h6wh | Critical | 0.6% | 12 May, 2026 | npm sillytavern |
SillyTavern has Authentication Bypass via SSO Header Injection CVE-2026-44649, GHSA-gxx6-h3g6-vwjh | Critical | 0.2% | 12 May, 2026 | npm sillytavern |
Open Source Kubectl MCP Server vulnerable to arbitrary code execution via user interaction with crafted HTML page CVE-2025-65719, GHSA-94gr-w3q5-rfqr, PYSEC-2026-371 | Critical | 0.6% | 12 May, 2026 | PyPI kubectl-mcp-server npm kubectl-mcp-server |
OpenClaude Sandbox Bypass via Model-Controlled `dangerouslyDisableSandbox` Input CVE-2026-42074, GHSA-m77w-p5jj-xmhg | Critical | 0.6% | 12 May, 2026 | npm openclaude |
sealed-env: TOTP secret embedded in unseal token payload (enterprise mode) CVE-2026-45091, GHSA-x3r2-fj3r-g5mv | Critical | 0.3% | 12 May, 2026 | Maven io.github.davidalmeidac:sealed-env-core npm sealed-env |
Malware in @tanstack/* packages exfiltrates cloud credentials, GitHub tokens, and SSH keys CVE-2026-45321, GHSA-g7cv-rxg3-hmpx | CriticalExploited | 3.3% | 12 May, 2026 | npm @tanstack/arktype-adapter npm @tanstack/eslint-plugin-router npm @tanstack/eslint-plugin-start npm @tanstack/history +38 more |
SandboxJS has a sandbox escape via Function.caller leakage of internal call op CVE-2026-43898, GHSA-g8f2-4f4f-5jqw | Critical | 0.5% | 11 May, 2026 | npm @nyariv/sandboxjs |
WebdriverIO BrowserStack Service has a Command Injection issue CVE-2026-25244, GHSA-5c46-x3qw-q7j7 | Critical | 3.3% | 11 May, 2026 | npm @wdio/browserstack-service |
Angular Expressions - Remote Code Execution using filters CVE-2026-44643, GHSA-pw8r-6689-xvf4 | Critical | 0.5% | 11 May, 2026 | npm angular-expressions |
@profullstack/mcp-server vulnerable to OS Command Injection in domain_lookup Module GHSA-v6wj-c83f-v46x | Critical | Not scored | 09 May, 2026 | npm @profullstack/mcp-server |
Velocity.js has a Prototype Pollution vulnerability through #set path assignment CVE-2026-44966, GHSA-j658-c2gf-x6pq | Critical | 0.5% | 09 May, 2026 | npm velocityjs |
@yoda.digital/gitlab-mcp-server's SSE transport has no authentication and wildcard CORS, exposing all 86 GitLab tools CVE-2026-44895, GHSA-8jr5-6gvj-rfpf | Critical | 0.4% | 09 May, 2026 | npm @yoda.digital/gitlab-mcp-server |
Cline Kanban Server has a Cross-Origin WebSocket Hijacking Vulnerability CVE-2026-44211, GHSA-5c57-rqjx-35g2 | Critical | 0.2% | 08 May, 2026 | npm cline |
vm2 has Sandbox Breakout Through Null Proto Exception CVE-2026-44009, GHSA-9vg3-4rfj-wgcm | Critical | 0.8% | 08 May, 2026 | npm vm2 |
vm2 has sandbox breakout via `neutralizeArraySpeciesBatch` CVE-2026-44008, GHSA-9qj6-qjgg-37qq | Critical | 0.9% | 08 May, 2026 | npm vm2 |
Electerm users can run dangrous code through link or command line CVE-2026-43944, GHSA-mpm8-cx2p-626q | Critical | 0.4% | 08 May, 2026 | npm electerm |
Electerm has an unvalidated shell.openExternal that allows arbitrary protocol execution via terminal link click CVE-2026-43941, GHSA-fwf6-j56g-m97c | Critical | 0.4% | 08 May, 2026 | npm electerm |
Electerm runWidget has a path traversal that leads to arbitrary code execution CVE-2026-43940, GHSA-f77v-9vpc-6pjm | Critical | 0.2% | 08 May, 2026 | npm electerm |
Compromised version of intercom-client published to npm GHSA-54pg-9963-v8vg | Critical | Not scored | 07 May, 2026 | npm intercom-client |
query-parser-string is vulnerable to Prototype Pollution CVE-2025-63704, GHSA-587p-w43q-4hjx | Critical | 0.5% | 07 May, 2026 | npm query-string-parser |
parse-ini is vulnerable to Prototype Pollution in index.js() CVE-2025-63703, GHSA-x72j-hv9f-qqh4 | Critical | 0.4% | 07 May, 2026 | npm parse-ini |
next-npm-version is vulnerable to Command injection CVE-2025-63706, GHSA-2xx6-qf7x-grqh | Critical | 1.5% | 07 May, 2026 | npm @jswork/next-npm-version |
vm2 NodeVM `nesting: true` bypasses `require: false` allowing sandbox escape and arbitrary OS command execution CVE-2026-44007, GHSA-8hg8-63c5-gwmx | Critical | 1.0% | 07 May, 2026 | npm vm2 |
vm2 has a NodeVM builtin allowlist bypass via `module` builtin's `Module._load` that allows sandbox escape CVE-2026-43999, GHSA-947f-4v7f-x2v8 | Critical | 1.0% | 07 May, 2026 | npm vm2 |
vm2: Mutable Proxies for Host Intrinsic Prototypes Allows Sandbox Escape CVE-2026-44005, GHSA-vwrp-x96c-mhwq | Critical | 0.8% | 07 May, 2026 | npm vm2 |
vm2 Access to Host Object Enables Sandbox Escape CVE-2026-43997, GHSA-47x8-96vw-5wg6 | Critical | 1.0% | 07 May, 2026 | npm vm2 |
vm2 has a Sandbox Escape Vulnerability CVE-2026-44006, GHSA-qcp4-v2jj-fjx8 | Critical | 0.8% | 07 May, 2026 | npm vm2 |
fast-jwt: JWT auth bypass due to empty HMAC secret accepted by async key resolver CVE-2026-44351, GHSA-gmvf-9v4p-v8jc | Critical | 0.3% | 06 May, 2026 | npm fast-jwt |
MagicMirror vulnerable to unauthenticated SSRF via /cors endpoint CVE-2026-42281, GHSA-ph6f-2cvq-79hq | Critical | 1.6% | 05 May, 2026 | npm magicmirror |
Axios has prototype pollution read-side gadgets in HTTP adapter that allow credential injection and request hijacking CVE-2026-42264, GHSA-q8qp-cvcw-x6jj | Critical | 0.8% | 05 May, 2026 | npm axios |
VM2 Has a WASM Sandbox Escape CVE-2026-26956, GHSA-ffh4-j6h5-pg66 | Critical | 1.1% | 04 May, 2026 | npm vm2 |
VM2 Has a Sandbox Escape Issue via SuppressedError CVE-2026-26332, GHSA-55hx-c926-fr95 | Critical | 0.7% | 04 May, 2026 | npm vm2 |
VM2 Has Sandbox Breakout Through Inspect Function CVE-2026-24781, GHSA-v37h-5mfm-c47c | Critical | 1.2% | 04 May, 2026 | npm vm2 |
VM2 Has Sandbox Breakout Through Promise Species CVE-2026-24120, GHSA-qvjj-29qf-hp7p | Critical | 0.9% | 04 May, 2026 | npm vm2 |
VM2 Sandbox Breakout Through __lookupGetter__ CVE-2026-24118, GHSA-grj5-jjm8-h35p | Critical | 0.9% | 04 May, 2026 | npm vm2 |
n8n has XML Node Prototype Pollution that to RCE CVE-2026-42232, GHSA-hqr4-h3xv-9m3r | Critical | 0.5% | 29 Apr, 2026 | npm n8n |
n8n has Prototype Pollution in XML Webhook Body Parser that Leads to RCE CVE-2026-42231, GHSA-q5f4-99jv-pgg5 | Critical | 0.9% | 29 Apr, 2026 | npm n8n |
electerm has Command Injection via runLinux funtion CVE-2026-41501, GHSA-8x35-hph8-37hq | Critical | 1.3% | 24 Apr, 2026 | npm electerm |
Gemini CLI: Remote Code Execution via workspace trust and tool allowlisting bypasses CVE-2026-12537, GHSA-wpqr-6v78-jr5g | Critical | 0.2% | 24 Apr, 2026 | GitHub Actions google-github-actions/run-gemini-cli npm @google/gemini-cli |