Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-27488OpenClaw hardened cron webhook delivery against SSRFnpm · openclaw · fixed in 2026.2.19
- CVE-2026-27487OpenClaw: Prevent shell injection in macOS keychain credential writenpm · openclaw · fixed in 2026.2.14
- CVE-2026-27486OpenClaw: Process Safety - Unvalidated PID Kill via SIGKILL in Process Cleanupnpm · openclaw · fixed in 2026.2.14
- CVE-2026-27485OpenClaw affected by Stored XSS in Control UI via unsanitized assistant name/avatar in inline script injectionnpm · openclaw · fixed in 2026.2.19
- CVE-2026-27484OpenClaw Discord moderation authorization used untrusted sender identity in tool-driven flowsnpm · openclaw · fixed in 2026.2.18
- CVE-2026-27212Swiper has a Prototype Pollution Vulnerabilitynpm · swiper · fixed in 12.1.2
- CVE-2026-27210Pannellum has a XSS vulnerability in hot spot attributesnpm · pannellum · fixed in 2.5.7
- CVE-2026-27193Feathers exposes internal headers via unencrypted session cookienpm · @feathersjs/authentication-oauth · fixed in 5.0.40
- CVE-2026-27192Feathers has an origin validation bypass via prefix matchingnpm · @feathersjs/authentication-oauth · fixed in 5.0.40
- CVE-2026-27191Feathers: Open Redirect in OAuth callback enables account takeovernpm · @feathersjs/authentication-oauth · fixed in 5.0.40
- CVE-2026-27203eBay API MCP Server Affected by Environment Variable Injectionnpm · ebay-mcp
- CVE-2026-27125Svelte SSR attribute spreading includes inherited properties from prototype chainnpm · svelte · fixed in 5.51.5
- CVE-2026-27122Svelte SSR does not validate dynamic element tag names in `<svelte:element>`npm · svelte · fixed in 5.51.5
- CVE-2026-27121Svelte affected by cross-site scripting via spread attributes in Svelte SSRnpm · svelte · fixed in 5.51.5
- CVE-2026-27119Svelte affected by XSS in SSR `<option>` elementnpm · svelte · fixed in 5.51.5
- CVE-2026-27118Cache poisoning in @sveltejs/adapter-vercelnpm · @sveltejs/adapter-vercel · fixed in 6.3.2
- CVE-2026-27022RediSearch Query Injection in @langchain/langgraph-checkpoint-redisnpm · @langchain/langgraph-checkpoint-redis · fixed in 1.0.2
- CVE-2026-25896fast-xml-parser has an entity encoding bypass via regex injection in DOCTYPE entity namesnpm · fast-xml-parser · fixed in 5.3.5, 4.5.4
- CVE-2026-2739This affects versions of the package bn.js before 5.2.3.npm · bn.js · fixed in 4.12.3, 5.2.3
- CVE-2026-26996minimatch has a ReDoS via repeated wildcards with non-matching literal in patternnpm · minimatch · fixed in 10.2.1, 9.0.6, 8.0.5 and more
- CVE-2026-26960node-tar has Arbitrary File Read/Write via Hardlink Target Escape Through Symlink Chain in Extractionnpm · tar · fixed in 7.5.8
- CVE-2026-26980Ghost has a SQL Injection in its Content APInpm · ghost · fixed in 6.19.1
- CVE-2026-26974Sylde has Improper Control of Generation of Codenpm · @tygo-van-den-hurk/slyde · fixed in 0.0.5
- CVE-2025-67438A Stored Cross-Site Scripting (XSS) vulnerability in Sync-in Server before 1.9.3 allows an authenticated attacker to execute arbitrary JavaSnpm · @sync-in/server · fixed in 1.9.3
- CVE-2026-27009OpenClaw affected by Stored XSS in Control UI via unsanitized assistant name/avatar in inline script injectionnpm · openclaw · fixed in 2026.2.15
- CVE-2026-27008OpenClaw hardened the skill download target directory validationnpm · openclaw · fixed in 2026.2.15
- CVE-2026-27007OpenClaw's sandbox config hash sorted primitive arrays and suppressed needed container recreationnpm · openclaw · fixed in 2026.2.15
- CVE-2026-27004OpenClaw session tool visibility hardening and Telegram webhook secret fallbacknpm · openclaw · fixed in 2026.2.15
- CVE-2026-27003OpenClaw: Telegram bot token exposure via logsnpm · openclaw · fixed in 2026.2.15
- CVE-2026-27002OpenClaw: Docker container escape via unvalidated bind mount config injectionnpm · openclaw · fixed in 2026.2.15