Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
OpenClaw: Message action attachment hydration bypasses local media root checks when sandboxRoot is unset CVE-2026-27522, GHSA-fqcm-97m6-w7rm | High | 0.4% | 02 Mar, 2026 | npm openclaw |
OpenClaw: Gateway /tools/invoke tool escalation + ACP permission auto-approval GHSA-943q-mwmv-hhvh | High | Not scored | 02 Mar, 2026 | npm openclaw |
OpenClaw has non-constant-time token comparison in hooks authentication CVE-2026-28464, GHSA-jmm5-fvh5-gf4p | High | 0.4% | 02 Mar, 2026 | npm openclaw |
OpenClaw has Zip Slip path traversal in tar archive extraction CVE-2026-28453, GHSA-p25h-9q54-ffvw | High | 0.5% | 02 Mar, 2026 | npm openclaw |
OpenClaw voice-call media stream validated streams after upgrade, which could allow pre-start unauthenticated sockets to increase resource pressure CVE-2026-32062, GHSA-mfg5-7q5g-f37j | High | 0.4% | 02 Mar, 2026 | npm @openclaw/voice-call npm openclaw |
OpenClaw's inbound media downloads could exceed configured byte limits before rejection across multiple channels CVE-2026-32049, GHSA-rxxp-482v-7mrh | High | 0.6% | 02 Mar, 2026 | npm openclaw |
OpenClaw Canvas Path Traversal Information Disclosure Vulnerability CVE-2026-3689, GHSA-jq4x-98m3-ggq6 | High | 0.9% | 02 Mar, 2026 | npm openclaw |
OpenClaw's exec allow-always can be bypassed via unrecognized multiplexer shell wrappers (busybox/toybox sh -c) CVE-2026-22175, GHSA-gwqp-86q6-w47g | High | 0.3% | 02 Mar, 2026 | npm openclaw |
OpenClaw's allow-always wrapper persistence could bypass future approvals and enable command execution CVE-2026-29607, GHSA-6j27-pc5c-m8w8 | High | 0.4% | 02 Mar, 2026 | npm openclaw |
OpenClaw has Windows system.run approval mismatch on cmd.exe /c trailing arguments CVE-2026-22168, GHSA-5v6x-rfc3-7qfr | High | 0.4% | 02 Mar, 2026 | npm openclaw |
@keep-network/tbtc-v2 revealing P2PKH deposit with a wrapped P2SH script GHSA-8986-v76q-8vr2 | High | Not scored | 02 Mar, 2026 | npm @keep-network/tbtc-v2 |
OpenClaw: system.run approvals did not bind PATH-token executable identity, enabling post-approval executable rebind CVE-2026-31997, GHSA-q399-23r3-hfx4 | High | 0.1% | 02 Mar, 2026 | npm openclaw |
OpenClaw has web_search citation redirect SSRF via private-network-allowing policy CVE-2026-31989, GHSA-g99v-8hwm-g76g | High | 0.2% | 02 Mar, 2026 | npm openclaw |
OpenClaw's authorization mismatch allowed write-scope agent runs to reach owner-only tools CVE-2026-32051, GHSA-jr6x-2q95-fh2g | High | 0.4% | 02 Mar, 2026 | npm openclaw |
OpenClaw: Sandbox media TOCTOU could read files outside sandbox root GHSA-7xmq-g46g-f8pv | High | Not scored | 02 Mar, 2026 | npm openclaw |
OpenClaw's TOCTOU symlink race in writeFileWithinRoot could create or truncate files outside root boundaries GHSA-x82f-27x3-q89c | High | Not scored | 02 Mar, 2026 | npm openclaw |
OpenClaw's sandboxed sessions_spawn now enforces sandbox inheritance for cross-agent spawns CVE-2026-32048, GHSA-p7gr-f84w-hqg5 | High | 0.3% | 02 Mar, 2026 | npm openclaw |
OpenClaw has unbounded memory growth in Zalo webhook via query-string key churn (unauthenticated DoS) CVE-2026-28461, CVE-2026-32066, GHSA-wr6m-jg37-68xh | High | 0.4% | 02 Mar, 2026 | npm openclaw |
OpenClaw: Browser control startup could continue unauthenticated after auth bootstrap failure CVE-2026-32041, GHSA-vpj2-69hf-rppw | High | 0.1% | 02 Mar, 2026 | npm openclaw |
OpenChatBI has a Path Traversal Vulnerability in save_report Tool CVE-2026-28795, GHSA-vmwq-8g8c-jm79, PYSEC-2026-2794 | High | 0.5% | 02 Mar, 2026 | PyPI openchatbi |
OliveTin has Unauthenticated Action Termination via KillAction When Guests Must Login CVE-2026-28790, GHSA-4fqm-6fmh-82mq, GO-2026-4587 | High | Not scored | 02 Mar, 2026 | Go github.com/OliveTin/OliveTin |
OliveTin has unauthenticated DoS via concurrent map writes in OAuth2 state handling CVE-2026-28789, GHSA-45m3-398w-m2m9, GO-2026-4586 | High | Not scored | 02 Mar, 2026 | Go github.com/OliveTin/OliveTin |
Idno Vulnerable to Remote Code Execution via Chained Import File Write and Template Path Traversal CVE-2026-28507, GHSA-37j7-56xc-c468 | High | 0.8% | 02 Mar, 2026 | Packagist idno/known |
CocoIndex Doris target connector didn't verify table name when constructing ALTER TABLE statements CVE-2026-28438, GHSA-59g6-v3vg-f7wc, PYSEC-2026-2133 | High | 0.3% | 02 Mar, 2026 | PyPI cocoindex |
FileBrowser has Path Traversal in Public Share Links that Exposes Files Outside Shared Directory CVE-2026-28492, GHSA-mr74-928f-rw69, GO-2026-4585 | High | Not scored | 02 Mar, 2026 | Go github.com/filebrowser/filebrowser Go github.com/filebrowser/filebrowser/v2 |
OliveTin has Unauthenticated Denial of Service via Memory Exhaustion in PasswordHash API Endpoint CVE-2026-28342, GHSA-pc8g-78pf-4xrp, GO-2026-4584 | High | Not scored | 02 Mar, 2026 | Go github.com/OliveTin/OliveTin |
joserfc's PBES2 p2c Unbounded Iteration Count enables Denial of Service (DoS) CVE-2026-27932, GHSA-w5r5-m38g-f9f9, PYSEC-2026-2529 | High | 0.5% | 02 Mar, 2026 | PyPI joserfc |
OpenEXR's CompositeDeepScanLine integer-overflow leads to heap OOB write CVE-2026-27622, GHSA-cr4v-6jm6-4963, PYSEC-2026-2846 | High | 0.2% | 02 Mar, 2026 | PyPI OpenEXR PyPI openexr |
Qualcomm Multiple Chipsets Memory Corruption Vulnerability CVE-2026-21385 | HighExploited | 1.3% | 02 Mar, 2026 | |
kaniko has tar archive path traversal in its build context extraction, allowing file writes outside destination directories CVE-2026-28406, GHSA-6rxq-q92g-4rmf, GO-2026-4580 | High | Not scored | 01 Mar, 2026 | Go github.com/chainguard-dev/kaniko |
INSATutorat has an authorization bypass vulnerability in its /api/admin/* endpoints GHSA-xfx2-prg5-jq3g, GO-2026-4581 | High | Not scored | 01 Mar, 2026 | Go github.com/romitou/insatutorat |
Serialize JavaScript is Vulnerable to RCE via RegExp.flags and Date.prototype.toISOString() GHSA-5c6j-r48x-rmvq | High | Not scored | 28 Feb, 2026 | npm serialize-javascript |
osctrl is Vulnerable to OS Command Injection via Environment Configuration CVE-2026-28279, GHSA-rchw-322g-f7rm, GO-2026-4579 | High | Not scored | 28 Feb, 2026 | Go github.com/jmpsec/osctrl |
SvelteKit has deserialization expansion in unvalidated `form` remote function leading to Denial of Service (experimental only) CVE-2026-82259, GHSA-fpg4-jhqr-589c | High | 0.5% | 28 Feb, 2026 | npm @sveltejs/kit |
Statamic vulnerable to privilege escalation via stored cross-site scripting CVE-2026-28426, GHSA-5vrj-wf7v-5wr7 | High | 0.3% | 27 Feb, 2026 | Packagist statamic/cms |
Statamic vulnerable to remote code execution via Antlers-enabled control panel inputs CVE-2026-28425, GHSA-cpv7-q2wx-m8rw | High | 0.5% | 27 Feb, 2026 | Packagist statamic/cms |
Statamic Vulnerable to Server-Side Request Forgery via Glide CVE-2026-28423, GHSA-cwpp-325q-2cvp | High | 0.4% | 27 Feb, 2026 | Packagist statamic/cms |
Gradio has SSRF via Malicious `proxy_url` Injection in `gr.load()` Config Processing CVE-2026-28416, GHSA-jmh7-g254-2cq9, PYSEC-2026-66 | High | 7.3% | 27 Feb, 2026 | PyPI gradio |
Gradio is Vulnerable to Absolute Path Traversal on Windows with Python 3.13+ CVE-2026-28414, GHSA-39mp-8hj3-5c49, PYSEC-2026-64 | High | 3.1% | 27 Feb, 2026 | PyPI gradio |
Statamic allows Authenticated Control Panel users to escalate privileges via elevated session bypass CVE-2026-27939, GHSA-rw9x-pxqx-q789 | High | 0.4% | 27 Feb, 2026 | Packagist statamic/cms |
ZITADEL Users Can Self-Verify Email/Phone via UpdateHumanUser API CVE-2026-27946, GHSA-282g-fhmx-xf54, GO-2026-4572 | High | Not scored | 27 Feb, 2026 | Go github.com/zitadel/zitadel |
phpMyFAQ Allows Unauthenticated Account Creation via WebAuthn Prepare Endpoint CVE-2026-27836, GHSA-w22q-m2fm-x9f4 | High | 0.5% | 27 Feb, 2026 | Packagist thorsten/phpmyfaq |
@fastify/middie has Improper Path Normalization when Using Path-Scoped Middleware CVE-2026-2880, GHSA-8p85-9qpw-fwgw | High | 0.4% | 27 Feb, 2026 | npm @fastify/middie |
CleverTap Web SDK is vulnerable to DOM-based Cross-Site Scripting (XSS) via window.postMessage CVE-2026-26862, GHSA-jfrq-hj9f-c8qx | High | 0.4% | 27 Feb, 2026 | npm clevertap-web-sdk |
CleverTap Web SDK is vulnerable to DOM-based XSS via handleCustomHtmlPreviewPostMessageEvent function CVE-2026-26861, GHSA-j5mf-6rh3-rhgg | High | 0.2% | 27 Feb, 2026 | npm clevertap-web-sdk |
Nest has a Fastify URL Encoding Middleware Bypass CVE-2026-2293, GHSA-r4wm-x892-vjmx | High | 0.8% | 27 Feb, 2026 | npm @nestjs/platform-fastify |
Multer vulnerable to Denial of Service via incomplete cleanup CVE-2026-3304, GHSA-xf7r-hgr6-v32p | High | 0.7% | 27 Feb, 2026 | npm multer |
Multer vulnerable to Denial of Service via resource exhaustion CVE-2026-2359, GHSA-v52c-386h-88mc | High | 0.7% | 27 Feb, 2026 | npm multer |
rubyipmi is vulnerable to OS Command Injection through malicious usernames CVE-2026-0980, GHSA-hfcp-477w-3wjw | High | Not scored | 27 Feb, 2026 | RubyGems rubyipmi |
Vitess users with backup storage access can gain unauthorized access to production deployment environments CVE-2026-27965, GHSA-8g8j-r87h-p36x, GO-2026-4567 | High | Not scored | 26 Feb, 2026 | Go vitess.io/vitess |