Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-27001OpenClaw: Unsanitized CWD path injection into LLM promptsnpm · openclaw · fixed in 2026.2.15
- CVE-2026-26972OpenClaw has a Path Traversal in Browser Download Functionalitynpm · openclaw · fixed in 2026.2.13
- CVE-2026-26329OpenClaw has a path traversal in browser upload allows local file readnpm · openclaw · fixed in 2026.2.14
- CVE-2026-26328OpenClaw iMessage group allowlist authorization inherited DM pairing-store identitiesnpm · clawdbot, openclaw · fixed in 2026.2.14
- CVE-2026-26327OpenClaw allows unauthenticated discovery TXT records to steer routing and TLS pinningnpm · openclaw · fixed in 2026.2.14
- CVE-2026-26326OpenClaw skills.status could leak secrets to operator.read clientsnpm · openclaw · fixed in 2026.2.14
- CVE-2026-26325OpenClaw Node host system.run rawCommand/command mismatch can bypass allowlist/approvalsnpm · openclaw · fixed in 2026.2.14
- CVE-2026-26324OpenClaw has a SSRF guard bypass via full-form IPv4-mapped IPv6 (loopback / metadata reachable)npm · openclaw · fixed in 2026.2.14
- CVE-2026-26323OpenClaw has a command injection in maintainer clawtributors updaternpm · openclaw · fixed in 2026.2.14
- CVE-2026-26322OpenClaw Gateway tool allowed unrestricted gatewayUrl overridenpm · openclaw · fixed in 2026.2.14
- CVE-2026-26321OpenClaw has a local file disclosure via sendMediaFeishu in Feishu extensionnpm · openclaw · fixed in 2026.2.14
- CVE-2026-26320OpenClaw macOS deep link confirmation truncation can conceal executed agent messagenpm · openclaw · fixed in 2026.2.14
- CVE-2026-26319OpenClaw has Missing Webhook Authentication in Telnyx Provider Allowing Unauthenticated Requestsnpm · openclaw · fixed in 2026.2.14
- CVE-2026-26317OpenClaw affected by cross-site request forgery (CSRF) through loopback browser mutation endpointsnpm · clawdbot, openclaw · fixed in 2026.2.14
- CVE-2026-26316OpenClaw has BlueBubbles webhook auth bypass via loopback proxy trustnpm · @openclaw/bluebubbles, openclaw · fixed in 2026.2.13
- GHSA-8QM3-746X-R74Rdevalue `uneval`ed code can create objects with polluted prototypes when `eval`ednpm · devalue · fixed in 5.6.3
- CVE-2026-26318systeminformation has Command Injection via Unsanitized `locate` Output in `versions()`npm · systeminformation · fixed in 5.31.0
- CVE-2026-26280Systeminformation has a Command Injection via unsanitized interface parameter in wifi.js retry pathnpm · systeminformation · fixed in 5.30.8
- CVE-2026-26278fast-xml-parser affected by DoS through entity expansion in DOCTYPE (no expansion limit)npm · fast-xml-parser · fixed in 4.5.4, 5.3.6
- CVE-2026-27013Fabric.js Affected by Stored XSS via SVG Exportnpm · fabric · fixed in 7.2.0
- CVE-2026-26063CediPay Affected by Improper Input Validation in Payment Processingnpm · cedipay-core · fixed in 1.2.3
- CVE-2026-25940jsPDF's PDF Injection in AcroForm module allows Arbitrary JavaScript Execution (RadioButton.createOption and "AS" property)npm · jspdf · fixed in 4.2.0
- CVE-2026-25755jsPDF has PDF Object Injection via Unsanitized Input in addJS Methodnpm · jspdf · fixed in 4.2.0
- CVE-2026-25535jsPDF Affected by Client-Side/Server-Side Denial of Service via Malicious GIF Dimensionsnpm · jspdf · fixed in 4.2.0
- CVE-2026-25474OpenClaw has a Telegram webhook request forgery (missing `channels.telegram.webhookSecret`) → auth bypassnpm · openclaw · fixed in 2026.2.1
- CVE-2026-24764OpenClaw has Remote Code Execution via System Prompt Injection in Slack Channel Descriptionsnpm · openclaw · fixed in 2026.2.3
- CVE-2025-69287BSV Blockchain SDK has an Authentication Signature Data Preparation Vulnerabilitynpm · @bsv/sdk · fixed in 2.0.0
- CVE-2026-26226beautiful-mermaid < 0.1.3 SVG Attribute Injectionnpm · beautiful-mermaid · fixed in 0.1.3
- CVE-2026-1721Reflected Cross-Site Scripting (XSS) vulnerability in AI Playground sitenpm · agents · fixed in 0.3.10
- CVE-2026-26185Directus Affected by User Enumeration via Password Reset Timing Attacknpm · @directus/api, directus · fixed in 32.2.0, 11.14.1