Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Axios: Invisible JSON Response Tampering via Prototype Pollution Gadget in `parseReviver` CVE-2026-42044, GHSA-3w6x-2g7m-8v23 | Critical | 0.6% | 24 Apr, 2026 | npm axios |
Axios: Incomplete Fix for CVE-2025-62718 — NO_PROXY Protection Bypassed via RFC 1122 Loopback Subnet (127.0.0.0/8) in Axios 1.15.0 CVE-2026-42043, GHSA-pmwg-cvhr-8vh7 | Critical | 0.7% | 24 Apr, 2026 | npm axios |
OpenLearnX has Critical Remote Code Execution Through Python Sandbox Escape via Code Execution Environment CVE-2026-41900, GHSA-8h25-q488-4hxw | Critical | 0.9% | 23 Apr, 2026 | npm openlearnx |
Evolver: Command Injection via `execSync` in `_extractLLM()` function allows Remote Code Execution CVE-2026-42076, GHSA-j5w5-568x-rq53 | Critical | 1.7% | 22 Apr, 2026 | npm @evomap/evolver |
i18next-http-backend has Path Traversal & URL Injection via Unsanitised lng/ns CVE-2026-41691, GHSA-q89c-q3h5-w34g | Critical | 0.3% | 22 Apr, 2026 | npm i18next-http-backend |
Flowise: CSV Agent Prompt Injection Remote Code Execution Vulnerability CVE-2026-41264, GHSA-3hjv-c53m-58jj | Critical | 1.8% | 21 Apr, 2026 | npm flowise npm flowise-components |
Flowise: Airtable_Agent Code Injection Remote Code Execution Vulnerability CVE-2026-41265, GHSA-v38x-c887-992f | Critical | 0.6% | 18 Apr, 2026 | npm flowise npm flowise-components |
OpenClaw: Feishu webhook and card-action validation now fail closed CVE-2026-44109, GHSA-xh72-v6v9-mwhc | Critical | 0.7% | 17 Apr, 2026 | npm openclaw |
OpenClaw: Gateway HTTP endpoints re-resolve bearer auth after SecretRef rotation CVE-2026-43585, GHSA-xmxx-7p24-h892 | Critical | 0.5% | 17 Apr, 2026 | npm openclaw |
Remote Code Execution (RCE) via String Literal Injection into math-codegen CVE-2026-41507, GHSA-p6x5-p4xf-cc4r | Critical | 0.4% | 17 Apr, 2026 | npm math-codegen |
OpenClaw: Sandbox browser CDP relay could expose DevTools protocol on 0.0.0.0 CVE-2026-43581, GHSA-525j-hqq2-66r4 | Critical | 0.2% | 17 Apr, 2026 | npm openclaw |
OpenClaw: Agent hook events could enqueue trusted system events from unsanitized external input CVE-2026-43534, GHSA-7g8c-cfr3-vqqr | Critical | 0.2% | 17 Apr, 2026 | npm openclaw |
OpenClaw: Heartbeat owner downgrade missed local async exec completion events CVE-2026-43578, GHSA-g375-h3v6-4873 | Critical | 0.3% | 17 Apr, 2026 | npm openclaw |
OpenClaw: Heartbeat owner downgrade missed untrusted webhook wake events CVE-2026-43566, GHSA-g2hm-779g-vm32 | Critical | 0.4% | 17 Apr, 2026 | npm openclaw |
OpenClaw: Sandbox noVNC helper route exposed interactive browser session credentials CVE-2026-43575, GHSA-92jp-89mq-4374 | Critical | 0.4% | 17 Apr, 2026 | npm openclaw |
Saltcorn: SQL Injection via Unparameterized Sync Endpoints (maxLoadedId) CVE-2026-41478, GHSA-jp74-mfrx-3qvh | Critical | 0.3% | 16 Apr, 2026 | npm @saltcorn/server |
Paperclip: Cross-tenant agent API key IDOR in `/agents/:id/keys` routes allows full victim-company compromise GHSA-3xx2-mqjm-hg9x | Critical | Not scored | 16 Apr, 2026 | npm @paperclipai/server |
Paperclip: Cross-tenant agent API token minting via missing assertCompanyAccess on /api/agents/:id/keys GHSA-47wq-cj9q-wpmp | Critical | Not scored | 16 Apr, 2026 | npm @paperclipai/server |
Paperclip: OS Command Injection via Execution Workspace cleanupCommand GHSA-vr7g-88fq-vhq3 | Critical | Not scored | 16 Apr, 2026 | npm @paperclipai/server |
Budibase: Authentication Bypass via Unanchored Regex in Public Endpoint Matcher — Unauthenticated Access to Protected Endpoints CVE-2026-41428, GHSA-8783-3wgf-jggf | Critical | 0.4% | 16 Apr, 2026 | npm @budibase/backend-core |
Arbitrary code execution in protobufjs CVE-2026-41242, GHSA-xq3m-2v4x-88gg | Critical | 0.8% | 16 Apr, 2026 | npm protobufjs |
Flowise: Cypher Injection in GraphCypherQAChain CVE-2026-41274, GHSA-28g4-38q8-3cwc | Critical | 0.5% | 16 Apr, 2026 | npm flowise npm flowise-components |
Flowise: Parameter Override Bypass Remote Command Execution CVE-2026-41268, GHSA-cvrr-qhgw-2mm6 | Critical | 17.4% | 16 Apr, 2026 | npm flowise npm flowise-components |
Flowise: Improper Mass Assignment in Account Registration Enables Unauthorized Organization Association CVE-2026-41267, GHSA-48m6-ch88-55mj | Critical | 0.3% | 16 Apr, 2026 | npm flowise |
Flowise: Code Injection in CSVAgent leads to Authenticated RCE CVE-2026-41137, GHSA-9wc7-mj3f-74xv | Critical | 1.5% | 16 Apr, 2026 | npm flowise npm flowise-components |
Official Clerk JavaScript SDKs: Middleware-based route protection bypass CVE-2026-41248, GHSA-vqx2-fgx2-5wq9 | Critical | 0.3% | 16 Apr, 2026 | npm @clerk/astro npm @clerk/nextjs npm @clerk/nuxt npm @clerk/shared |
electerm: electerm_install_script_CommandInjection Vulnerability Report CVE-2026-41500, GHSA-wxw2-rwmh-vr8f | Critical | 1.6% | 16 Apr, 2026 | npm electerm |
Flowise: Weak Default Express Session Secret CVE-2026-56278, GHSA-2qqc-p94c-hxwh | Critical | 0.5% | 16 Apr, 2026 | npm flowise |
Flowise: Weak Default JWT Secrets CVE-2026-56271, GHSA-cc4f-hjpj-g9p8 | Critical | 0.7% | 16 Apr, 2026 | npm flowise |
Flowise: Authenticated RCE Via MCP Adapters CVE-2026-40933, GHSA-c9gw-hvqq-f33r | Critical | 12.0% | 16 Apr, 2026 | npm flowise npm flowise-components |
@fastify/middie vulnerable to middleware bypass via deprecated ignoreDuplicateSlashes option CVE-2026-33804, GHSA-v9ww-2j6r-98q6 | Critical | 0.3% | 16 Apr, 2026 | npm @fastify/middie |
@fastify/middie vulnerable to middleware authentication bypass in child plugin scopes CVE-2026-6270, GHSA-72c6-fx6q-fr5w | Critical | 0.5% | 16 Apr, 2026 | npm @fastify/middie |
Fastify's connection header abuse enables stripping of proxy-added headers CVE-2026-33805, GHSA-gwhp-pf74-vj37 | Critical | 0.4% | 15 Apr, 2026 | npm @fastify/http-proxy npm @fastify/reply-from |
@fastify/express has a middleware authentication bypass via URL normalization gaps (duplicate slashes and semicolons) CVE-2026-33808, GHSA-6hw5-45gm-fj88 | Critical | 0.5% | 15 Apr, 2026 | npm @fastify/express |
@fastify/express's middleware path doubling causes authentication bypass in child plugin scopes CVE-2026-33807, GHSA-hrwm-hgmj-7p9c | Critical | 0.4% | 15 Apr, 2026 | npm @fastify/express |
@vendure/core has a SQL Injection vulnerability CVE-2026-40887, GHSA-9pp3-53p2-ww9v | Critical | 1.8% | 14 Apr, 2026 | npm @vendure/core |
OpenAI Codex CLI enables code execution through malicious MCP (Model Context Protocol) configuration files CVE-2025-61260, GHSA-xrxf-jgv3-qmrm | Critical | 6.6% | 14 Apr, 2026 | npm @openai/codex |
paperclip Vulnerable to Unauthenticated Remote Code Execution via Import Authorization Bypass CVE-2026-41679, GHSA-68qg-g8mg-6pr7 | Critical | 31.7% | 10 Apr, 2026 | npm @paperclipai/server npm paperclipai |
LangSmith Client SDKs has Prototype Pollution in langsmith-sdk via Incomplete `__proto__` Guard in Internal lodash `set()` CVE-2026-40190, GHSA-fw9q-39r9-c252 | Critical | 0.3% | 10 Apr, 2026 | npm langsmith |
@delmaredigital/payload-puc is missing authorization on /api/puck/* CRUD endpoints allows unauthenticated access to Puck-registered collections CVE-2026-39397, GHSA-65w6-pf7x-5g85 | Critical | 0.4% | 07 Apr, 2026 | npm @delmaredigital/payload-puck |
Directus: Missing Cross-Origin Opener Policy CVE-2026-35408, GHSA-8m32-p958-jg99 | Critical | 0.2% | 04 Apr, 2026 | npm directus |
SandboxJS: Sandbox integrity escape CVE-2026-34208, GHSA-2gg9-6p7w-6cpj | Critical | 0.6% | 03 Apr, 2026 | npm @nyariv/sandboxjs |
Budibase: Unauthenticated Remote Code Execution via Webhook Trigger and Bash Automation Step CVE-2026-35216, GHSA-fcm4-4pj2-m5hf | Critical | 10.7% | 03 Apr, 2026 | npm @budibase/server |
Budibase: Server-Side Request Forgery via REST Connector with Empty Default Blacklist CVE-2026-31818, GHSA-7r9j-r86q-7g45 | Critical | 0.4% | 03 Apr, 2026 | npm @budibase/backend-core |
fast-jwt: Cache Confusion via cacheKeyBuilder Collisions Can Return Claims From a Different Token (Identity/Authorization Mixup) CVE-2026-35039, GHSA-rp9m-7r4c-75qg | Critical | 0.2% | 03 Apr, 2026 | npm fast-jwt |
Better Auth Has Two-Factor Authentication Bypass via Premature Session Caching (session.cookieCache) CVE-2026-67337, GHSA-xg6x-h9c9-2m83 | Critical | 0.5% | 03 Apr, 2026 | npm better-auth |
OpenClaw: Unbound bootstrap setup codes allow privilege escalation during pairing CVE-2026-41386, GHSA-gg9v-mgcp-v6m7 | Critical | 0.3% | 03 Apr, 2026 | npm openclaw |
OpenClaw: Sandbox escape via TOCTOU race in remote FS bridge readFile CVE-2026-41296, GHSA-9p3r-hh9g-5cmg | Critical | 0.2% | 03 Apr, 2026 | npm openclaw |
Electron: nodeIntegrationInWorker not correctly scoped in shared renderer processes CVE-2026-34775, GHSA-xwr5-m59h-vwqr | Critical | 0.3% | 03 Apr, 2026 | npm electron |
OpenClaw: Heartbeat context inheritance bypasses sandbox via senderIsOwner escalation CVE-2026-41329, GHSA-g5cg-8x5w-7jpm | Critical | 0.3% | 02 Apr, 2026 | npm openclaw |