Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-47210vm2 sandbox escape via JSPI-backed Promise `.finally()` species bypassnpm · vm2 · fixed in 3.11.4
- CVE-2026-47208vm2: Sandbox Breakout Using Promise Speciesnpm · vm2 · fixed in 3.11.4
- CVE-2026-47140vm2: NodeVM builtin denylist bypass via process and inspector/promises allows host code executionnpm · vm2 · fixed in 3.11.4
- CVE-2026-47139vm2: NodeVM network builtin exclusions bypass via internal _http_client and _http_servernpm · vm2 · fixed in 3.11.4
- CVE-2026-47137vm2: GHSA-8hg8-63c5-gwmx patch bypass: nesting:true without explicit require still allows full RCEnpm · vm2 · fixed in 3.11.4
- CVE-2026-47135vm2: Sandbox escape via unblocked cross-realm Symbol.for keys + missing bridge write-trap symbol checksnpm · vm2 · fixed in 3.11.4
- CVE-2026-47131vm2: Sandbox Escapenpm · vm2 · fixed in 3.11.4
- CVE-2026-47209vm2: Bridge Proxy set trap ignores receiver parameter, enabling host object property injection via prototype chainnpm · vm2 · fixed in 3.11.4
- CVE-2026-53722Nuxt: Reflected XSS in `<NuxtLink>` via unsanitised `javascript:` or `data:` URLnpm · nuxt · fixed in 4.4.7, 3.21.7
- CVE-2026-53721Nuxt: Route-rule middleware bypass via case-sensitivity mismatch between vue-router and the routeRules matchernpm · nuxt · fixed in 4.4.7, 3.21.7
- CVE-2026-47200Nuxt: Route middleware not enforced when rendering `.server.vue` pages via `/__nuxt_island/page_*`npm · @nuxt/nitro-server, nuxt · fixed in 3.21.6, 4.4.6
- CVE-2026-49993@nuxt/webpack-builder and @nuxt/rspack-builder dev server same-origin check bypassed when Sec-Fetch-Site, Origin, and Referer are all absent (incomplete fix for GHSA-6m52-m754-pw2g)npm · @nuxt/rspack-builder, @nuxt/webpack-builder · fixed in 4.4.7, 3.21.7
- CVE-2026-45669Nuxt: Reflected XSS in `navigateTo()` external redirectnpm · nuxt · fixed in 3.21.6, 4.4.6
- CVE-2026-45670Nuxt: Dev server exposes built source over LAN to malicious sites (incomplete fix for GHSA-4gf7-ff8x-hq99)npm · @nuxt/rspack-builder, @nuxt/webpack-builder · fixed in 3.21.6, 4.4.6
- CVE-2026-46342Nuxt: `__nuxt_island` endpoint does not bind responses to request props, enabling shared-cache poisoningnpm · @nuxt/nitro-server, nuxt · fixed in 3.21.6, 4.4.6
- CVE-2026-53819OpenClaw < 2026.5.27 - Arbitrary Homebrew Executable Execution via Workspace .env Overridenpm · openclaw · fixed in 2026.5.27
- CVE-2026-53818OpenClaw < 2026.4.24 - Owner-Only Tool Policy Bypass via MCP Loopbacknpm · openclaw · fixed in 2026.4.24
- CVE-2026-53817OpenClaw < 2026.5.22 - Control UI Locality Spoofing in Device Pairingnpm · openclaw · fixed in 2026.5.22
- CVE-2026-53816OpenClaw < 2026.5.18 - Exec Lifecycle Event Forgery via Paired Nodenpm · openclaw · fixed in 2026.5.18
- CVE-2026-53815OpenClaw < 2026.5.19 - Channel Allowlist Bypass in Message Read Actionsnpm · openclaw · fixed in 2026.5.19
- CVE-2026-53814OpenClaw < 2026.5.20 - Privilege Escalation via Hook-Triggered CLI MCP Tool Authoritynpm · openclaw · fixed in 2026.5.20
- CVE-2026-53813OpenClaw < 2026.4.25 - Arbitrary Artifact Loading via Fake Package Root Resolutionnpm · openclaw · fixed in 2026.4.25
- CVE-2026-53812OpenClaw < 2026.5.18 - Private-Network Navigation Bypass via Browser Act Interactionsnpm · openclaw · fixed in 2026.5.18
- CVE-2026-53811OpenClaw < 2026.5.7 - Privilege Escalation via Mutable Display Names in Matrix allowFromnpm · openclaw · fixed in 2026.5.7
- CVE-2026-53810OpenClaw < 2026.5.18 - Arbitrary Code Execution via Unscanned Marketplace Runtime Extension Metadatanpm · openclaw · fixed in 2026.5.18
- CVE-2026-53809OpenClaw < 2026.4.25 - Provider Alias Confusion in Embedded Runner Policynpm · openclaw · fixed in 2026.4.25
- CVE-2026-53808OpenClaw < 2026.5.6 - Approval Policy Bypass in Skill Workshop Apply Flownpm · openclaw · fixed in 2026.5.6
- CVE-2026-53807OpenClaw < 2026.5.6 - Authorization Bypass in Telegram Interactive Callbacks via commands.allowFromnpm · openclaw · fixed in 2026.5.6
- CVE-2026-53806OpenClaw < 2026.5.12 - Shell Option Parsing Bypass in Exec Revalidationnpm · openclaw · fixed in 2026.5.12
- CVE-2026-53782Summarize < 0.17.0 SSRF via podcast:transcript URL fetchnpm · @steipete/summarize · fixed in 0.17.0