Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
OpenClaw: Sandbox media fallback tmp symlink alias bypass allows host file reads outside sandboxRoot GHSA-xmv6-r34m-62p4 | High | Not scored | 03 Mar, 2026 | npm openclaw |
OpenClaw's `tools.exec.safeBins` PATH-hijack allowed trojan binaries to bypass allowlist checks CVE-2026-32015, GHSA-g75x-8qqm-2vxp | High | 0.1% | 03 Mar, 2026 | npm openclaw |
OpenClaw Improperly Neutralizes Line Breaks in systemd Unit Generation Enables Local Command Execution (Linux) CVE-2026-32063, GHSA-vffc-f7r7-rx2w | High | 1.1% | 03 Mar, 2026 | npm openclaw |
OpenClaw has a Command Injection via unescaped environment assignments in Windows Scheduled Task script generation CVE-2026-22176, GHSA-pj5x-38rw-6fph | High | 0.7% | 03 Mar, 2026 | npm openclaw |
OpenClaw has macOS `system.run` allowlist bypass via quoted command substitution CVE-2026-22179, GHSA-9p38-94jf-hgjj | High | 0.7% | 03 Mar, 2026 | npm openclaw |
OpenClaw unpaired device identity can bypass operator pairing and self-assign operator scopes with shared auth CVE-2026-32042, GHSA-553v-f69r-656j | High | 0.4% | 03 Mar, 2026 | npm openclaw |
OpenClaw browser navigation guard allowed non-network URL schemes, enabling authenticated browser-tool users to access file:// local files CVE-2026-32008, GHSA-45cg-2683-gfmq | High | 0.4% | 03 Mar, 2026 | npm openclaw |
OpenClaw Windows Scheduled Task script generation allowed local command injection via unsafe cmd argument handling CVE-2026-31994, GHSA-mqr9-vqhq-3jxw | High | 0.6% | 03 Mar, 2026 | npm openclaw |
OpenClaw: Experimental apply_patch may bypass workspace-only checks in opt-in sandbox mounts (off by default) CVE-2026-32007, GHSA-h9xm-j4qg-fvpg | High | 0.4% | 03 Mar, 2026 | npm openclaw |
OpenClaw: safeBins static default trusted dirs allow writable-dir binary hijack (`jq`) CVE-2026-32009, GHSA-5gj7-jf77-q2q2 | High | 0.1% | 03 Mar, 2026 | npm openclaw |
OpenClaw: Sandboxed sessions_spawn(runtime="acp") bypassed sandbox inheritance and allowed host ACP initialization GHSA-474h-prjg-mmw3 | High | Not scored | 03 Mar, 2026 | npm openclaw |
OpenClaw has encoded-path auth bypass in plugin `/api/channels` route classification CVE-2026-32004, GHSA-v865-p3gq-hw6m | High | 0.3% | 03 Mar, 2026 | npm openclaw |
OpenClaw: ZIP extraction race could write outside destination via parent symlink rebind CVE-2026-27670, CVE-2026-28483, GHSA-r54r-wmmq-mh84 | High | 0.1% | 03 Mar, 2026 | npm openclaw |
OpenClaw has pre-auth webhook body parsing that can enable unauthenticated slow-request DoS CVE-2026-32011, GHSA-x4vp-4235-65hg | High | 0.4% | 03 Mar, 2026 | npm openclaw |
OpenClaw: stageSandboxMedia destination symlink traversal can overwrite files outside sandbox workspace CVE-2026-31990, GHSA-cfvj-7rx7-fc7c | High | 0.1% | 03 Mar, 2026 | npm openclaw |
Craft CMS has potential authenticated Remote Code Execution via Twig SSTI CVE-2026-28784, GHSA-qc86-q28f-ggww | High | 0.6% | 03 Mar, 2026 | Packagist craftcms/cms |
Craft CMS: Entries Authorship Spoofing via Mass Assignment CVE-2026-28781, GHSA-2xfc-g69j-x2mp | High | 0.4% | 03 Mar, 2026 | Packagist craftcms/cms |
Craft CMS has IDOR via GraphQL @parseRefs CVE-2026-28696, GHSA-7x43-mpfg-r9wj | High | 0.5% | 03 Mar, 2026 | Packagist craftcms/cms |
Craft CMS Vulnerable to Authenticated RCE via Twig SSTI - create() function + Symfony Process gadget CVE-2026-28695, GHSA-94rc-cqvm-m4pw | High | 0.7% | 03 Mar, 2026 | Packagist craftcms/cms |
OpenClaw vulnerable to sensitive file disclosure via stageSandboxMedia CVE-2026-32030, GHSA-x9cf-3w63-rpq9 | High | 0.4% | 03 Mar, 2026 | npm openclaw |
OpenClaw's shell env fallback trusts unvalidated SHELL path from host environment CVE-2026-32032, GHSA-f8mp-vj46-cq8v | High | 0.1% | 03 Mar, 2026 | npm openclaw |
OpenClaw's andbox browser noVNC observer lacked VNC authentication CVE-2026-32064, GHSA-25gx-x37c-7pph | High | 0.5% | 03 Mar, 2026 | npm openclaw |
OpenClaw DM pairing-store identities could satisfy group allowlist authorization CVE-2026-32027, GHSA-jv6r-27ww-4gw4 | High | 0.2% | 03 Mar, 2026 | npm openclaw |
OpenClaw: Native prompt image auto-load did not honor tools.fs.workspaceOnly in sandboxed runs GHSA-9f72-qcpw-2hxc | High | Not scored | 03 Mar, 2026 | npm openclaw |
OpenClaw's non-default safeBins sort configuration can bypass intended allowlist approval constraints CVE-2026-22169, GHSA-vmqr-rc7x-3446 | High | 0.2% | 03 Mar, 2026 | npm openclaw |
OpenClaw has gateway plugin auth bypass via encoded dot-segment traversal in protected /api/channels paths CVE-2026-32036, GHSA-mwxv-35wr-4vvj | High | 0.4% | 03 Mar, 2026 | npm openclaw |
OpenClaw's gateway tokenless Tailscale auth applied to HTTP routes CVE-2026-32045, GHSA-hff7-ccv5-52f8 | High | 0.4% | 03 Mar, 2026 | npm openclaw |
OpenClaw vulnerable to path traversal in Feishu media temp-file naming allows writes outside os.tmpdir() CVE-2026-22171, GHSA-vj3g-5px3-gr46 | High | 0.3% | 03 Mar, 2026 | npm openclaw |
Temporary path handling could write outside OpenClaw temp boundary CVE-2026-32026, GHSA-33hm-cq8r-wc49 | High | 0.4% | 03 Mar, 2026 | npm openclaw |
OpenClaw's MSTeams attachment redirect handling could bypass configured media host allowlists CVE-2026-32037, GHSA-w76h-8m22-hpgh | High | 0.2% | 03 Mar, 2026 | npm openclaw |
OpenClaw's hook transform module path allows traversal and arbitrary JavaScript module loading CVE-2026-28393, GHSA-7xhj-55q9-pc3m | High | 0.5% | 03 Mar, 2026 | npm openclaw |
OpenClaw has command injection via Windows shell fallback in Lobster tool execution CVE-2026-32000, GHSA-7fcc-cw49-xm78 | High | 0.6% | 03 Mar, 2026 | npm openclaw |
OpenClaw's Telegram message_reaction authorization bypass allows unauthorized system-event injection GHSA-qj22-xqjr-v83v | High | Not scored | 03 Mar, 2026 | npm openclaw |
OpenClaw has allowlist exec-guard bypass via env -S CVE-2026-31992, GHSA-48wf-g7cp-gr3m | High | 0.3% | 03 Mar, 2026 | npm openclaw |
BentoML Vulnerable to Arbitrary File Write via Symlink Path Traversal in Tar Extraction CVE-2026-27905, GHSA-m6w7-qv66-g3mf, PYSEC-2026-2398 | High | 0.3% | 03 Mar, 2026 | PyPI bentoml |
Underscore has unlimited recursion in _.flatten and _.isEqual, potential for DoS attack CVE-2026-27601, GHSA-qpx9-hpmf-5gmw | High | 1.1% | 03 Mar, 2026 | npm underscore |
OpenViking contains a Path Traversal vulnerability CVE-2026-28518, GHSA-rpqr-j937-6qr9, PYSEC-2026-2856 | High | 0.2% | 03 Mar, 2026 | PyPI openviking |
Django vulnerable to Uncontrolled Resource Consumption BIT-django-2026-25673, CVE-2026-25673, GHSA-8p8v-wh79-9r56, PYSEC-2026-2448 | High | 0.8% | 03 Mar, 2026 | PyPI Django PyPI django |
OpenClaw: macOS optional allowlist basename matching could bypass path-based policy CVE-2026-32016, GHSA-7f4q-9rqh-x36p | High | 0.1% | 03 Mar, 2026 | npm openclaw |
OpenClaw has system.run shell-wrapper env injection via SHELLOPTS/PS4 can bypass allowlist intent (RCE) CVE-2026-32003, GHSA-2fgq-7j6h-9rm4 | High | 0.5% | 03 Mar, 2026 | npm openclaw |
OpenClaw: Node reconnect metadata spoofing could bypass platform-based node command policy CVE-2026-32014, GHSA-r65x-2hqr-j5hf | High | 0.2% | 03 Mar, 2026 | npm openclaw |
OpenClaw: Node system.run approval bypass via parent-symlink cwd rebind CVE-2026-27545, GHSA-f7ww-2725-qvw2 | High | 0.1% | 02 Mar, 2026 | npm openclaw |
OpenClaw: Message action attachment hydration bypasses local media root checks when sandboxRoot is unset CVE-2026-27522, GHSA-fqcm-97m6-w7rm | High | 0.4% | 02 Mar, 2026 | npm openclaw |
OpenClaw: Gateway /tools/invoke tool escalation + ACP permission auto-approval GHSA-943q-mwmv-hhvh | High | Not scored | 02 Mar, 2026 | npm openclaw |
OpenClaw has non-constant-time token comparison in hooks authentication CVE-2026-28464, GHSA-jmm5-fvh5-gf4p | High | 0.4% | 02 Mar, 2026 | npm openclaw |
OpenClaw has Zip Slip path traversal in tar archive extraction CVE-2026-28453, GHSA-p25h-9q54-ffvw | High | 0.4% | 02 Mar, 2026 | npm openclaw |
OpenClaw voice-call media stream validated streams after upgrade, which could allow pre-start unauthenticated sockets to increase resource pressure CVE-2026-32062, GHSA-mfg5-7q5g-f37j | High | 0.4% | 02 Mar, 2026 | npm @openclaw/voice-call npm openclaw |
OpenClaw's inbound media downloads could exceed configured byte limits before rejection across multiple channels CVE-2026-32049, GHSA-rxxp-482v-7mrh | High | 0.6% | 02 Mar, 2026 | npm openclaw |
OpenClaw Canvas Path Traversal Information Disclosure Vulnerability CVE-2026-3689, GHSA-jq4x-98m3-ggq6 | High | 0.9% | 02 Mar, 2026 | npm openclaw |
OpenClaw's exec allow-always can be bypassed via unrecognized multiplexer shell wrappers (busybox/toybox sh -c) CVE-2026-22175, GHSA-gwqp-86q6-w47g | High | 0.3% | 02 Mar, 2026 | npm openclaw |