Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
AVideo: Unauthenticated Access to Payment Log DataTables Endpoints Exposes Transaction Data, PayPal Tokens, and User Financial Records CVE-2026-56341, GHSA-wprj-9cvc-5w37 | High | 0.5% | 29 Mar, 2026 | Packagist wwbn/avideo |
Parse Server exposes auth data via verify password endpoint BIT-parse-2026-34215, CVE-2026-34215, GHSA-wp76-gg32-8258 | High | 0.3% | 29 Mar, 2026 | npm parse-server |
mppx: Tempo has a session close voucher bypass vulnerability due to settled amount equality CVE-2026-34209, GHSA-mv9j-8jvg-j8mr | High | 0.4% | 29 Mar, 2026 | npm mppx |
OpenClaw: Gateway Plugin HTTP Auth Grants Unrestricted operator.admin Runtime Scope to All Callers CVE-2026-35669, GHSA-qm2m-28pf-hgjw | High | 0.3% | 27 Mar, 2026 | npm openclaw |
OpenClaw: Gateway HTTP /sessions/:sessionKey/kill Reaches Admin Kill Path Without Caller Scope Binding CVE-2026-34512, GHSA-9p93-7j67-5pc2 | High | 0.3% | 27 Mar, 2026 | npm openclaw |
Giskard Agents have Server-side template injection via ChatWorkflow.chat() using non-sandboxed Jinja2 Environment CVE-2026-34172, GHSA-frv4-x25r-588m, PYSEC-2026-2487 | High | 0.6% | 27 Mar, 2026 | PyPI giskard-agents |
Happy DOM's fetch credentials include uses page-origin cookies instead of target-origin cookies CVE-2026-34226, GHSA-w4gp-fjgq-3q4g | High | 0.5% | 27 Mar, 2026 | npm happy-dom |
Home Assistant has stored XSS in history-graphs CVE-2026-33045, GHSA-46j8-vpx8-6p72, PYSEC-2026-2516 | High | 0.2% | 27 Mar, 2026 | PyPI homeassistant |
Home Assistant has stored XSS in Map-card through malicious device name CVE-2026-33044, GHSA-r584-6283-p7xc, PYSEC-2026-2517 | High | 0.2% | 27 Mar, 2026 | PyPI homeassistant |
Clerk: SSRF in the opt-in clerkFrontendApiProxy feature may leak secret keys to unintended host CVE-2026-34076, GHSA-gjxx-92w9-8v8f | High | 0.3% | 27 Mar, 2026 | npm @clerk/backend npm @clerk/express npm @clerk/fastify npm @clerk/hono |
AWS SDK for PHP has CloudFront Policy Document Injection via Special Characters GHSA-27qh-8cxx-2cr5 | High | Not scored | 27 Mar, 2026 | Packagist aws/aws-sdk-php |
LangChain Core has Path Traversal vulnerabilites in legacy `load_prompt` functions CVE-2026-34070, GHSA-qh6h-p6c9-ff54, PYSEC-2026-2193 | High | 1.4% | 27 Mar, 2026 | PyPI langchain-core |
Langflow: Authenticated Users Can Read, Modify, and Delete Any Flow via Missing Ownership Check CVE-2026-34046, GHSA-8c4j-f57c-35cf, PYSEC-2026-2567, PYSEC-2026-2570 | High | 0.5% | 27 Mar, 2026 | PyPI langflow PyPI langflow-base |
AVideo Vulnerable to Reflected XSS via Unsanitized plugin Parameter in YPTWallet Stripe Payment Page CVE-2026-34375, GHSA-pm37-62g7-p768 | High | 0.3% | 27 Mar, 2026 | Packagist wwbn/avideo |
@mobilenext/mobile-mcp alllows arbitrary file write via Path Traversal in mobile screen capture tools CVE-2026-33989, GHSA-3p2m-h2v6-g9mx | High | 0.5% | 27 Mar, 2026 | npm @mobilenext/mobile-mcp |
Changedetection.io Discloses Environment Variables via jq env Builtin in Include Filters CVE-2026-33981, GHSA-58r7-4wr5-hfx8, PYSEC-2026-2130 | High | 0.5% | 27 Mar, 2026 | PyPI changedetection-io PyPI changedetection.io |
Azure Data Explorer MCP Server: KQL Injection in multiple tools allows MCP client to execute arbitrary Kusto queries CVE-2026-33980, GHSA-vphc-468g-8rfp, PYSEC-2026-2327 | High | 0.4% | 27 Mar, 2026 | PyPI adx-mcp-server |
Handlebars.js has JavaScript Injection in CLI Precompiler via Unescaped Names and Options CVE-2026-33941, GHSA-xjpj-3mr7-gcpf | High | 0.3% | 27 Mar, 2026 | npm handlebars |
Handlebars.js has JavaScript Injection via AST Type Confusion when passing an object as dynamic partial CVE-2026-33940, GHSA-xhpv-hc6g-r9c6 | High | 0.7% | 27 Mar, 2026 | npm handlebars |
Handlebars.js has Denial of Service via Malformed Decorator Syntax in Template Compilation CVE-2026-33939, GHSA-9cx6-37pm-9jff | High | 0.6% | 27 Mar, 2026 | npm handlebars |
Handlebars.js has JavaScript Injection via AST Type Confusion by tampering @partial-block CVE-2026-33938, GHSA-3mfm-83xf-c92r | High | 0.7% | 27 Mar, 2026 | npm handlebars |
Serialize JavaScript has CPU Exhaustion Denial of Service via crafted array-like objects CVE-2026-34043, GHSA-qj8w-gfj5-8c6v | High | 0.5% | 27 Mar, 2026 | npm serialize-javascript |
Express XSS Sanitizer: allowedTags/allowedAttributes bypass leads to permissive sanitization (XSS risk) CVE-2026-33979, GHSA-3843-rr4g-m8jq | High | 0.4% | 27 Mar, 2026 | npm express-xss-sanitizer |
MLFlow allows Tracing + Assessments Access CVE-2025-15381, GHSA-g6pg-52vf-843h, PYSEC-2026-2657 | High | 0.3% | 27 Mar, 2026 | PyPI mlflow |
Postiz has Multiple SSRF Vectors - Webhooks, RSS Feed, URL Loader GHSA-89v5-38xr-9m4j | High | Not scored | 27 Mar, 2026 | npm postiz |
Postiz App has a High-Severity SSRF Vulnerability via Next.js GHSA-vj2p-7pgw-g2wf | High | Not scored | 27 Mar, 2026 | npm postiz |
Open WebUI has unauthorized deletion of knowledge files CVE-2026-29070, GHSA-26gm-93rw-cchf, PYSEC-2026-2693 | High | 0.3% | 27 Mar, 2026 | PyPI open-webui |
Open WebUI's process_files_batch() endpoint missing ownership check, allows unauthorized file overwrite CVE-2026-28788, GHSA-jjp7-g2jw-wh3j, PYSEC-2026-2742 | High | 3.0% | 27 Mar, 2026 | PyPI open-webui |
vLLM has Hardcoded Trust Override in Model Files Enables RCE Despite Explicit User Opt-Out CVE-2026-27893, GHSA-7972-pg2x-xr59, PYSEC-2026-2297 | High | 1.4% | 27 Mar, 2026 | PyPI vllm |
C2C CI utils is vulnerable to DoS via pyasn dependency (CVE-2026-30922) GHSA-wcjx-v2wj-xg87 | High | Not scored | 26 Mar, 2026 | PyPI c2cciutils |
Forge has signature forgery in Ed25519 due to missing S > L check CVE-2026-33895, GHSA-q67f-28xg-22rw | High | 0.5% | 26 Mar, 2026 | npm node-forge |
node-forge RSA PKCS#1 v1.5 signature verification accepts extra nested DigestAlgorithm elements CVE-2026-33894, CVE-2026-85393, GHSA-86w9-cpqp-85rv, GHSA-ppp5-5v6c-4jwp | High | 0.5% | 26 Mar, 2026 | npm node-forge |
Forge has Denial of Service via Infinite Loop in BigInteger.modInverse() with Zero Input CVE-2026-33891, GHSA-5m6q-g25r-mvwx | High | 0.6% | 26 Mar, 2026 | npm node-forge |
OpenClaw's mutating internal ACP chat commands missed operator.admin scope enforcement CVE-2026-35631, GHSA-3w6x-gv34-mqpf | High | 0.2% | 26 Mar, 2026 | npm openclaw |
OpenClaw Exposes Credentials Embedded in baseUrl Fields via config.get and channels.status CVE-2026-35644, GHSA-ppwq-6v66-5m6j | High | 0.2% | 26 Mar, 2026 | npm openclaw |
OpenClaw has Inconsistent Host Exec Environment Override Sanitization CVE-2026-35650, GHSA-39pp-xp36-q6mg | High | 0.5% | 26 Mar, 2026 | npm openclaw |
OpenClaw's Trusted-proxy Control UI sessions retain privileged scopes without device identity on device-less allow paths CVE-2026-35638, GHSA-48vw-m3qc-wr99 | High | 0.3% | 26 Mar, 2026 | npm openclaw |
OpenClaw: Remote media error responses could trigger unbounded memory allocation before failure CVE-2026-35633, GHSA-4qwc-c7g9-4xcw | High | 0.4% | 26 Mar, 2026 | npm openclaw |
OpenClaw: Arbitrary code execution via unvalidated WebView JavascriptInterface CVE-2026-35643, GHSA-cxmw-p77q-wchg | High | 0.4% | 26 Mar, 2026 | npm openclaw |
path-to-regexp vulnerable to Denial of Service via sequential optional groups CVE-2026-4926, GHSA-j3q9-mxjg-w52f | High | 0.8% | 26 Mar, 2026 | npm path-to-regexp |
OpenClaw's system.run allowlist can be bypassed through an unregistered time dispatch wrapper CVE-2026-35666, GHSA-qm9x-v7cx-7rq4 | High | 0.4% | 26 Mar, 2026 | npm openclaw |
OpenClaw: Nostr inbound DMs could trigger unauthenticated crypto work before sender policy enforcement CVE-2026-35627, GHSA-65h8-27jh-q8wv | High | 0.5% | 26 Mar, 2026 | npm openclaw |
OpenClaw: Gateway agent /reset exposes admin session reset to operator.write callers CVE-2026-35660, GHSA-wq58-2pvg-5h4f | High | 0.3% | 26 Mar, 2026 | npm openclaw |
OpenClaw: Plivo V2 verified replay identity drifts on query-only variants CVE-2026-35618, GHSA-cg6c-q2hx-69h7 | High | 0.3% | 26 Mar, 2026 | npm openclaw |
brace-expansion: Zero-step sequence causes process hang and memory exhaustion CVE-2026-33750, GHSA-f886-m6hf-6m8v | High | 0.4% | 26 Mar, 2026 | npm brace-expansion |
AVideo has SQL Injection in category.php fixCleanTitle() via Unparameterized clean_title and id Variables CVE-2026-33770, GHSA-584p-rpvq-35vf | High | 0.5% | 26 Mar, 2026 | Packagist wwbn/avideo |
AVideo has SQL Injection via Partial Prepared Statement — videos_id Concatenated Directly into Query CVE-2026-33767, GHSA-fj74-qxj7-r3vc | High | 0.5% | 26 Mar, 2026 | Packagist wwbn/avideo |
LibreNMS is Vulnerable to Remote Code Execution by Arbitrary File Write CVE-2026-6204, GHSA-pr3g-phhr-h8fh | High | 7.5% | 26 Mar, 2026 | Packagist librenms/librenms |
OpenClaw is vulnerable to Path Traversal through path validation bypass CVE-2026-32846, GHSA-f6pf-4gjx-c94r, GHSA-hggm-x7r9-mm7v | High | 0.7% | 26 Mar, 2026 | npm openclaw |
BentoML has Dockerfile Command Injection via system_packages in bentofile.yaml CVE-2026-33744, GHSA-jfjg-vc52-wqvf, PYSEC-2026-157 | High | 0.3% | 26 Mar, 2026 | PyPI bentoml |