Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-25593OpenClaw Affected by Unauthenticated Local RCE via WebSocket config.applynpm · openclaw · fixed in 2026.1.20
- CVE-2026-25631Domain allowlist bypass enables credential exfiltrationnpm · n8n · fixed in 1.121.0
- CVE-2026-25586SandboxJS has a Sandbox Escape via Prototype Whitelist Bypass and Host Prototype Pollutionnpm · @nyariv/sandboxjs · fixed in 0.8.29
- CVE-2026-25520SandboxJS has a Sandbox Escapenpm · @nyariv/sandboxjs · fixed in 0.8.29
- CVE-2026-25587SandboxJS has a Sandbox Escapenpm · @nyariv/sandboxjs · fixed in 0.8.29
- CVE-2026-25641SandboxJS has a sandbox escape via TOCTOU bug on keys in property accessesnpm · @nyariv/sandboxjs · fixed in 0.8.29
- CVE-2026-25751FUXA Unauthenticated Exposure of Plaintext Database Credentialsnpm · fuxa-server · fixed in 1.2.10
- CVE-2026-25752FUXA Unauthenticated Remote Arbitrary Device Tag Writenpm · fuxa-server · fixed in 1.2.10
- CVE-2026-25651client-certificate-auth has an Open Redirect via Host Header Injection in HTTP-to-HTTPS redirectnpm · client-certificate-auth · fixed in 1.0.0
- CVE-2026-25725Claude Code Has Sandbox Escape via Persistent Configuration Injection in settings.jsonnpm · @anthropic-ai/claude-code · fixed in 2.1.2
- CVE-2026-25724Claude Code Has Permission Deny Bypass Through Symbolic Linksnpm · @anthropic-ai/claude-code · fixed in 2.1.7
- CVE-2026-25723Claude Code Vulnerable to Command Injection via Piped sed Command Bypasses File Write Restrictionsnpm · @anthropic-ai/claude-code · fixed in 2.0.55
- CVE-2026-25722Claude Code Vulnerable to Command Injection via Directory Change Bypasses Write Protectionnpm · @anthropic-ai/claude-code · fixed in 2.0.57
- CVE-2025-68157webpack buildHttp HttpUriPlugin allowedUris bypass via HTTP redirectsnpm · webpack · fixed in 5.104.0
- CVE-2025-68458webpack buildHttp: allowedUris allow-list bypass via URL userinfo (@) leading to build-time SSRF behaviornpm · webpack · fixed in 5.104.1
- CVE-2026-25547Uncontrolled Resource Consumption in @isaacs/brace-expansionnpm · @isaacs/brace-expansion · fixed in 5.0.1
- CVE-2026-25546Godot MCP is vulnerable to Command Injection via unsanitized projectPathnpm · @coding-solo/godot-mcp · fixed in 0.1.1
- CVE-2026-25536@modelcontextprotocol/sdk has cross-client data leak via shared server/transport instance reusenpm · @modelcontextprotocol/sdk · fixed in 1.26.0
- CVE-2026-25521Locutus is vulnerable to Prototype Pollutionnpm · locutus · fixed in 2.0.39
- CVE-2026-25157OpenClaw/Clawdbot has OS Command Injection via Project Root Path in sshNodeCommandnpm · clawdbot · fixed in 2026.1.29
- CVE-2026-25475OpenClaw Vulnerable to Local File Inclusion via MEDIA: Path Extractionnpm · openclaw · fixed in 2026.1.30
- CVE-2026-24884Compressing Vulnerable to Arbitrary File Write via Symlink Extractionnpm · compressing · fixed in 2.0.1, 1.10.4
- CVE-2026-23897Apollo Server is vulnerable to denial of service with `startStandaloneServer`npm · @apollo/server, apollo-server · fixed in 4.13.0, 5.4.0
- CVE-2026-21893n8n Vulnerable to Command Injection in Community Package Installationnpm · n8n · fixed in 1.120.3
- CVE-2026-25115n8n is vulnerable to Python sandbox escapenpm · n8n · fixed in 2.4.8
- CVE-2026-25056n8n Arbitrary File Write leading to RCE in n8n Merge Nodenpm · n8n · fixed in 1.118.0, 2.4.0
- CVE-2026-25055n8n Arbitrary File Write on Remote Systems via SSH Nodenpm · n8n · fixed in 2.4.0, 1.123.12
- CVE-2026-25054n8n is Vulnerable to Stored Cross-Site Scripting via Markdown Rendering in Workflow UInpm · n8n · fixed in 2.2.1, 1.123.9
- CVE-2026-25053n8n is Vulnerable to OS Command Injection in Git Nodenpm · n8n · fixed in 2.5.0, 1.123.10
- CVE-2026-25052n8n Improper File Access Controls Allow Arbitrary File Read by Authenticated Usersnpm · n8n · fixed in 2.5.0, 1.123.18