Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Remote Code Execution (RCE) via String Literal Injection into math-codegen CVE-2026-41507, GHSA-p6x5-p4xf-cc4r | Critical | 0.4% | 17 Apr, 2026 | npm math-codegen |
PraisonAI has an incomplete fix for CVE-2026-34935 - OS Command Injection CVE-2026-41497, GHSA-9qhq-v63v-fv3j, PYSEC-2026-473 | Critical | 0.5% | 17 Apr, 2026 | PyPI praisonai |
OpenClaw: Sandbox browser CDP relay could expose DevTools protocol on 0.0.0.0 CVE-2026-43581, GHSA-525j-hqq2-66r4 | Critical | 0.2% | 17 Apr, 2026 | npm openclaw |
OpenClaw: Agent hook events could enqueue trusted system events from unsanitized external input CVE-2026-43534, GHSA-7g8c-cfr3-vqqr | Critical | 0.2% | 17 Apr, 2026 | npm openclaw |
OpenClaw: Heartbeat owner downgrade missed local async exec completion events CVE-2026-43578, GHSA-g375-h3v6-4873 | Critical | 0.3% | 17 Apr, 2026 | npm openclaw |
OpenClaw: Heartbeat owner downgrade missed untrusted webhook wake events CVE-2026-43566, GHSA-g2hm-779g-vm32 | Critical | 0.4% | 17 Apr, 2026 | npm openclaw |
Dolibarr: OS Command Injection (RCE) via MAIN_ODT_AS_PDF configuration CVE-2026-23500, GHSA-w5j3-8fcr-h87w | Critical | 0.9% | 17 Apr, 2026 | Packagist dolibarr/dolibarr |
OpenClaw: Sandbox noVNC helper route exposed interactive browser session credentials CVE-2026-43575, GHSA-92jp-89mq-4374 | Critical | 0.4% | 17 Apr, 2026 | npm openclaw |
OpenViking: Unauthenticated remote bot control via OpenAPI HTTP routes CVE-2026-40525, GHSA-jgq2-vq69-gr6h, PYSEC-2026-438 | Critical | 0.6% | 17 Apr, 2026 | PyPI openviking |
Saltcorn: SQL Injection via Unparameterized Sync Endpoints (maxLoadedId) CVE-2026-41478, GHSA-jp74-mfrx-3qvh | Critical | 0.3% | 16 Apr, 2026 | npm @saltcorn/server |
Paperclip: Cross-tenant agent API key IDOR in `/agents/:id/keys` routes allows full victim-company compromise GHSA-3xx2-mqjm-hg9x | Critical | Not scored | 16 Apr, 2026 | npm @paperclipai/server |
Paperclip: Cross-tenant agent API token minting via missing assertCompanyAccess on /api/agents/:id/keys GHSA-47wq-cj9q-wpmp | Critical | Not scored | 16 Apr, 2026 | npm @paperclipai/server |
Paperclip: OS Command Injection via Execution Workspace cleanupCommand GHSA-vr7g-88fq-vhq3 | Critical | Not scored | 16 Apr, 2026 | npm @paperclipai/server |
Budibase: Authentication Bypass via Unanchored Regex in Public Endpoint Matcher — Unauthenticated Access to Protected Endpoints CVE-2026-41428, GHSA-8783-3wgf-jggf | Critical | 0.4% | 16 Apr, 2026 | npm @budibase/backend-core |
Arbitrary code execution in protobufjs CVE-2026-41242, GHSA-xq3m-2v4x-88gg | Critical | 0.8% | 16 Apr, 2026 | npm protobufjs |
Flowise: Cypher Injection in GraphCypherQAChain CVE-2026-41274, GHSA-28g4-38q8-3cwc | Critical | 0.5% | 16 Apr, 2026 | npm flowise npm flowise-components |
Flowise: Parameter Override Bypass Remote Command Execution CVE-2026-41268, GHSA-cvrr-qhgw-2mm6 | Critical | 17.4% | 16 Apr, 2026 | npm flowise npm flowise-components |
Flowise: Improper Mass Assignment in Account Registration Enables Unauthorized Organization Association CVE-2026-41267, GHSA-48m6-ch88-55mj | Critical | 0.3% | 16 Apr, 2026 | npm flowise |
Flowise: Code Injection in CSVAgent leads to Authenticated RCE CVE-2026-41137, GHSA-9wc7-mj3f-74xv | Critical | 1.5% | 16 Apr, 2026 | npm flowise npm flowise-components |
Official Clerk JavaScript SDKs: Middleware-based route protection bypass CVE-2026-41248, GHSA-vqx2-fgx2-5wq9 | Critical | 0.3% | 16 Apr, 2026 | npm @clerk/astro npm @clerk/nextjs npm @clerk/nuxt npm @clerk/shared |
electerm: electerm_install_script_CommandInjection Vulnerability Report CVE-2026-41500, GHSA-wxw2-rwmh-vr8f | Critical | 1.6% | 16 Apr, 2026 | npm electerm |
Flowise: Weak Default Express Session Secret CVE-2026-56278, GHSA-2qqc-p94c-hxwh | Critical | 0.5% | 16 Apr, 2026 | npm flowise |
Flowise: Weak Default JWT Secrets CVE-2026-56271, GHSA-cc4f-hjpj-g9p8 | Critical | 0.7% | 16 Apr, 2026 | npm flowise |
Flowise: Authenticated RCE Via MCP Adapters CVE-2026-40933, GHSA-c9gw-hvqq-f33r | Critical | 12.0% | 16 Apr, 2026 | npm flowise npm flowise-components |
@fastify/middie vulnerable to middleware bypass via deprecated ignoreDuplicateSlashes option CVE-2026-33804, GHSA-v9ww-2j6r-98q6 | Critical | 0.3% | 16 Apr, 2026 | npm @fastify/middie |
@fastify/middie vulnerable to middleware authentication bypass in child plugin scopes CVE-2026-6270, GHSA-72c6-fx6q-fr5w | Critical | 0.5% | 16 Apr, 2026 | npm @fastify/middie |
goodoneuz/pay-uz: the /payment/api/editable/update endpoint overwrites existing PHP payment hook files CVE-2026-31843, GHSA-m5wg-cjgh-223j | Critical | 1.4% | 16 Apr, 2026 | Packagist goodoneuz/pay-uz |
UEFI Firmware Parser has a heap out-of-bounds write in tiano decompressor ReadCLen CVE-2026-54334, GHSA-hm2w-vr2p-hq7w, PYSEC-2026-3394 | Critical | 0.8% | 16 Apr, 2026 | PyPI uefi-firmware |
UEFI Firmware Parser has a stack out-of-bounds write in tiano decompressor MakeTable CVE-2026-54333, GHSA-2689-5p89-6j3j, PYSEC-2026-3393 | Critical | 0.8% | 16 Apr, 2026 | PyPI uefi-firmware |
Froxlor has Local File Inclusion via path traversal in API `def_language` parameter leads to Remote Code Execution CVE-2026-41228, GHSA-w59f-67xm-rxx7 | Critical | 0.5% | 16 Apr, 2026 | Packagist froxlor/froxlor |
Froxlor has a PHP Code Injection via Unescaped Single Quotes in userdata.inc.php Generation (MysqlServer API) CVE-2026-41229, GHSA-gc9w-cc93-rjv8 | Critical | 0.5% | 16 Apr, 2026 | Packagist froxlor/froxlor |
Upsonic: remote code execution vulnerability in its MCP server/task creation functionality CVE-2026-30625, GHSA-cw73-5f7h-m4gv, PYSEC-2026-559 | Critical | 1.0% | 15 Apr, 2026 | PyPI upsonic |
Fastify's connection header abuse enables stripping of proxy-added headers CVE-2026-33805, GHSA-gwhp-pf74-vj37 | Critical | 0.4% | 15 Apr, 2026 | npm @fastify/http-proxy npm @fastify/reply-from |
@fastify/express has a middleware authentication bypass via URL normalization gaps (duplicate slashes and semicolons) CVE-2026-33808, GHSA-6hw5-45gm-fj88 | Critical | 0.5% | 15 Apr, 2026 | npm @fastify/express |
@fastify/express's middleware path doubling causes authentication bypass in child plugin scopes CVE-2026-33807, GHSA-hrwm-hgmj-7p9c | Critical | 0.4% | 15 Apr, 2026 | npm @fastify/express |
WWBN AVideo has an incomplete fix for CVE-2026-33502: Command Injection CVE-2026-41064, GHSA-pq8p-wc4f-vg7j | Critical | 0.3% | 14 Apr, 2026 | Packagist wwbn/avideo |
WWBN AVideo YPTSocket WebSocket Broadcast Relay Leads to Unauthenticated Cross-User JavaScript Execution via Client-Side eval() Sinks CVE-2026-40911, GHSA-gph2-j4c9-vhhr | Critical | 0.6% | 14 Apr, 2026 | Packagist wwbn/avideo |
@vendure/core has a SQL Injection vulnerability CVE-2026-40887, GHSA-9pp3-53p2-ww9v | Critical | 1.8% | 14 Apr, 2026 | npm @vendure/core |
Multiple security fixes in justhtml CVE-2026-7808, GHSA-4p64-v8f5-r2gx | Critical | 0.6% | 14 Apr, 2026 | PyPI justhtml |
Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability CVE-2026-33824 | CriticalExploited | 77.1% | 14 Apr, 2026 | |
Fortinet FortiSandbox OS Command Injection Vulnerability CVE-2026-39808 | CriticalExploited | 93.2% | 14 Apr, 2026 | |
OpenAI Codex CLI enables code execution through malicious MCP (Model Context Protocol) configuration files CVE-2025-61260, GHSA-xrxf-jgv3-qmrm | Critical | 6.6% | 14 Apr, 2026 | npm @openai/codex |
excel-mcp-server has a Path Traversal issue CVE-2026-40576, GHSA-j98m-w3xp-9f56, PYSEC-2026-331 | Critical | 0.5% | 14 Apr, 2026 | PyPI excel-mcp-server |
Google Agent Development Kit (ADK) has a Code Injection and Missing Authentication vulnerability CVE-2026-4810, GHSA-rg7c-g689-fr3x, PYSEC-2026-344 | Critical | 1.8% | 13 Apr, 2026 | PyPI google-adk |
aws-mcp has a Command Injection Remote Code Execution Vulnerability CVE-2026-5059, GHSA-fgmx-xfp3-w28p, PYSEC-2026-288 | Critical | 1.9% | 11 Apr, 2026 | PyPI aws-mcp |
paperclip Vulnerable to Unauthenticated Remote Code Execution via Import Authorization Bypass CVE-2026-41679, GHSA-68qg-g8mg-6pr7 | Critical | 31.7% | 10 Apr, 2026 | npm @paperclipai/server npm paperclipai |
gramps-webapi: Zip Slip Path Traversal in Media Archive Import CVE-2026-40258, GHSA-m5gr-86j6-99jp, PYSEC-2026-346 | Critical | 0.4% | 10 Apr, 2026 | PyPI gramps-webapi |
LangSmith Client SDKs has Prototype Pollution in langsmith-sdk via Incomplete `__proto__` Guard in Internal lodash `set()` CVE-2026-40190, GHSA-fw9q-39r9-c252 | Critical | 0.3% | 10 Apr, 2026 | npm langsmith |
ajenti.plugin.core has password bypass when 2FA is activated CVE-2026-40177, GHSA-3mcx-6wxm-qr8v, PYSEC-2026-266 | Critical | 0.3% | 10 Apr, 2026 | PyPI ajenti-plugin-core PyPI ajenti.plugin.core |
PraisonAI Browser Server allows unauthenticated WebSocket clients to hijack connected extension sessions CVE-2026-40289, GHSA-8x8f-54wf-vv92, PYSEC-2026-467, PYSEC-2026-485 | Critical | 0.4% | 10 Apr, 2026 | PyPI PraisonAI PyPI praisonai PyPI praisonaiagents |