Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-10690wonderwhy-er DesktopCommanderMCP read_file filesystem.ts readFileFromUrl server-side request forgerynpm · @wonderwhy-er/desktop-commander
- CVE-2026-49144BrowserStack Runner 0.9.5 Path Traversal via _default HTTP Handlernpm · browserstack-runner
- CVE-2026-49143BrowserStack Runner 0.9.5 Unauthenticated RCE via /_log HTTP Handlernpm · browserstack-runner
- CVE-2026-42342React Router vulnerable to DoS via unbounded path expansion in __manifest endpointnpm · @remix-run/server-runtime, react-router · fixed in 2.17.5, 7.15.0
- CVE-2026-42211React Router's vendored turbo-stream v2 allows arbitrary constructor invocation via TYPE_ERROR deserialization leading to Unauth RCEnpm · react-router · fixed in 7.14.2
- CVE-2026-40181React Router's same-origin redirect with path starting // causes open redirect via protocol-relative URL reinterpretationnpm · @remix-run/router, react-router · fixed in 1.23.3, 7.14.1, 6.30.4
- CVE-2026-34077React Router vulnerable to Denial of Service via reflected user input in single-fetchnpm · react-router, turbo-stream · fixed in 7.14.0, 3.0.0
- CVE-2026-33245React Router vulnerable to XSS in unstable RSC redirect handling via javascript: redirect targetsnpm · react-router · fixed in 7.13.2
- CVE-2026-33244React Router has stored XSS via unescaped Location header in prerendered redirect HTMLnpm · react-router · fixed in 7.13.2
- CVE-2026-42073OpenClaude's MCP OAuth Callback: State Check Bypass via error Param Leads to DoSnpm · @gitlawb/openclaude · fixed in 0.5.1
- CVE-2026-42074OpenClaude: Sandbox Bypass via Model-Controlled `dangerouslyDisableSandbox` Inputnpm · openclaude · fixed in 0.5.1
- CVE-2026-10291Enderfga claw-orchestrator Session Grep Endpoint embedded-server.ts validateRegex redosnpm · @enderfga/claw-orchestrator · fixed in 3.7.1
- CVE-2026-10281Enderfga claw-orchestrator API Endpoint embedded-server.ts EmbeddedServer missing authenticationnpm · @enderfga/claw-orchestrator · fixed in 3.5.6
- CVE-2026-45302Prototype Pollution in parse-nested-form-data via `__proto__` in FormData field namesnpm · parse-nested-form-data · fixed in 1.0.1
- CVE-2024-52011launch-editor vulnerable to command injection via the crafted request on Windowsnpm · launch-editor, vite · fixed in 2.9.0, 5.4.9
- CVE-2026-44211Cline Kanban Server has a Cross-Origin WebSocket Hijacking Vulnerabilitynpm · cline
- CVE-2026-45149brace-expansion: Large numeric range defeats documented `max` DoS protectionnpm · brace-expansion · fixed in 5.0.6
- CVE-2026-44651SillyTavern: Reflected XSS vulnerability in the CORS proxy middlewarenpm · sillytavern · fixed in 1.18.0
- CVE-2026-44650SillyTavern: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')npm · sillytavern · fixed in 1.18.0
- CVE-2026-44648SillyTavern: Existing sessions are not invalidated after password change, allowing session reuse and account takeovernpm · sillytavern · fixed in 1.18.0
- CVE-2026-44649SillyTavern: Authentication Bypass via SSO Header Injectionnpm · sillytavern · fixed in 1.18.0
- CVE-2026-44652SillyTavern: SSRF vulnerability in the CORS proxy middlewarenpm · sillytavern · fixed in 1.18.0
- CVE-2026-46372SillyTavern: SSRF in SearXNG Search Proxy via Unvalidated baseUrlnpm · sillytavern · fixed in 1.18.0
- CVE-2026-45577Neotoma: Unauthenticated Inspector/API access via reverse-proxy loopback auth bypassnpm · neotoma · fixed in 0.11.1
- CVE-2026-35674OpenClaw < 2026.5.18 - Scope Bypass via Inherited chat.send Routenpm · openclaw · fixed in 2026.5.18
- CVE-2026-35673OpenClaw < 2026.4.29 - SSRF Policy Bypass via Browser Debug/Export Routesnpm · openclaw · fixed in 2026.4.29
- CVE-2026-35630OpenClaw < 2026.5.18 - QQBot Missing Approver Identity Enforcement in Native Approval Buttonsnpm · openclaw · fixed in 2026.5.18
- CVE-2026-34507OpenClaw < 2026.4.29 - Policy Bypass in QQBot Admin Commands via DM-only and allowFrom Checksnpm · openclaw · fixed in 2026.4.29
- CVE-2026-32906OpenClaw < 2026.5.12 - Privilege Escalation in Slack Plugin Approvals via Exec Approver Gatenpm · openclaw · fixed in 2026.5.12
- CVE-2026-32905OpenClaw < 2026.5.4 - Unauthorized Device-Pairing Bootstrap Code Issuance via Chat Commandnpm · openclaw · fixed in 2026.5.4