Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-53846OpenClaw < 2026.4.29 - Arbitrary Package Manager Execution via Workspace .env npm_execpathnpm · openclaw · fixed in 2026.4.29
- CVE-2026-53845OpenClaw < 2026.5.6 - Skill-Command Dispatch Hook Bypass via Before-Tool-Call Hook Skippingnpm · openclaw · fixed in 2026.5.6
- CVE-2026-53844OpenClaw < 2026.4.29 - Session Visibility Check Bypass in Shared Memory Searchnpm · openclaw · fixed in 2026.4.29
- CVE-2026-53843OpenClaw < 2026.5.26 - Node Token Revocation Bypass via Pairing-Scoped Device Sessionnpm · openclaw · fixed in 2026.5.26
- CVE-2026-53842OpenClaw < 2026.5.2 - Arbitrary Python Runtime Execution via CLOUDSDK_PYTHON Environment Variablenpm · openclaw · fixed in 2026.5.2
- CVE-2026-53841OpenClaw < 2026.5.12 - Cross-Site Scripting via Unsafe Markdown Links in Exported Session HTMLnpm · openclaw · fixed in 2026.5.12
- CVE-2026-53840OpenClaw < 2026.5.12 - Custom Header Leakage via MCP Streamable HTTP Cross-Origin Redirectsnpm · openclaw · fixed in 2026.5.12
- CVE-2026-42089yeoman-environment Vulnerable to Arbitrary Package Installation without User Confirmationnpm · yeoman-environment · fixed in 6.0.1
- CVE-2026-47684Sync-in Server: SSRF protection bypass via IPv4-mapped IPv6 addresses in regExpPrivateIPnpm · @sync-in/server · fixed in 2.3.0
- CVE-2026-48017DbGate: Remote Code Execution via functionName injection in loadReader endpointnpm · dbgate-api · fixed in 7.1.9
- CVE-2026-48714i18next-http-middleware missingKeyHandler does not reject keys whose segments contain prototype-polluting namesnpm · i18next-http-middleware · fixed in 3.9.7
- CVE-2026-48713i18next-fs-backend: Prototype pollution via crafted missing-key stringnpm · i18next-fs-backend · fixed in 2.6.6
- CVE-2026-9595webpack-dev-server vulnerable to HMR WebSocket interception via permissive user proxiesnpm · webpack-dev-server · fixed in 5.2.5
- CVE-2026-5038multer vulnerable to Denial of Service via incomplete cleanup of aborted uploadsnpm · multer · fixed in 2.2.0, 3.0.0-alpha.2
- CVE-2026-5079multer vulnerable to Denial of Service via deeply nested field namesnpm · multer · fixed in 2.2.0, 3.0.0-alpha.2
- CVE-2026-12208jsonata-js jsonata Function Binding Frame System jsonata.js createFrame prototype pollutionnpm · jsonata · fixed in 1.8.8, 2.2.1
- CVE-2026-30120remotion-dev remotion v4.0.409 was discovered to contain a remote code execution (RCE) vulnerability.npm · remotion · fixed in 4.0.410
- CVE-2026-30121remotion-dev remotion v4.0.409 was discovered to contain an arbitrary file write vulnerability.npm · remotion · fixed in 4.0.410
- CVE-2026-50880An issue in the sendmail transport integration component of YouTransfer v1.0.6 allows attackers to execute arbitrary code via supplying a crnpm · youtransfer
- CVE-2026-53839OpenClaw < 2026.5.7 - Hostname Prefix Matching Bypass in Trusted Retry Endpoint Validationnpm · openclaw · fixed in 2026.5.7
- CVE-2026-53838OpenClaw < 2026.5.27 - Node Pairing State Mutation via Reconnectionnpm · openclaw · fixed in 2026.5.27
- CVE-2026-53837OpenClaw < 2026.5.6 - Missing Channel Type Validation in Mattermost Event Handlersnpm · openclaw · fixed in 2026.5.6
- CVE-2026-53836OpenClaw < 2026.5.12 - Allowlist Bypass via PowerShell Encoded-Command Aliasesnpm · openclaw · fixed in 2026.5.12
- CVE-2026-53835OpenClaw < 2026.5.6 - Config-Write Enforcement Bypass in Feishu Dynamic-Agent Bindingsnpm · openclaw · fixed in 2026.5.6
- CVE-2026-53834OpenClaw < 2026.4.27 - Authorization Bypass in QQBot Pre-dispatch Slash Commandsnpm · openclaw · fixed in 2026.4.27
- CVE-2026-53833QQBot for OpenClaw < 2026.4.29 - Authorization Bypass via QQBot Streaming Commandnpm · openclaw · fixed in 2026.4.29
- CVE-2026-53832OpenClaw < 2026.5.18 - Identity Header Forgery via Trusted-Proxy Configurationnpm · openclaw · fixed in 2026.5.18
- CVE-2026-53831OpenClaw < 2026.5.18 - Arbitrary File Read via Shell Expansion in system.run Safe-bin Allowlistnpm · openclaw · fixed in 2026.5.18
- CVE-2026-53830OpenClaw < 2026.4.22 - Webhook Secret Revocation Bypass via secrets.reloadnpm · openclaw · fixed in 2026.4.22
- CVE-2026-53829OpenClaw < 2026.5.18 - Command Truncation in Exec Approval Displaynpm · openclaw · fixed in 2026.5.18