Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-44997OpenClaw < 2026.4.22 - Security Envelope Constraint Bypass in ACP Child Sessionsnpm · openclaw · fixed in 2026.4.22
- CVE-2026-44996OpenClaw < 2026.4.15 - Arbitrary Local File Read via Webchat Audio Embeddingnpm · openclaw · fixed in 2026.4.15
- CVE-2026-44995OpenClaw < 2026.4.20 - Arbitrary Code Execution via MCP stdio Environment Variablesnpm · openclaw · fixed in 2026.4.20
- CVE-2026-44994OpenClaw < 2026.4.22 - Authentication Bypass in Gateway Control UI Bootstrap Config Endpointnpm · openclaw · fixed in 2026.4.22
- CVE-2026-44993OpenClaw < 2026.4.20 - Direct Message Misclassification in Feishu Card Actionsnpm · openclaw · fixed in 2026.4.20
- CVE-2026-44992OpenClaw 2026.4.5 through 2026.4.19 - MiniMax API Host Override via Workspace dotenvnpm · openclaw · fixed in 2026.4.20
- CVE-2026-44991OpenClaw < 2026.4.21 - Authorization Bypass in Owner-Enforced Commands via Wildcard Channel Sendersnpm · openclaw · fixed in 2026.4.21
- CVE-2026-42349Clerk: Authorization bypass when combining organization, billing, or reverification checksnpm · @clerk/astro, @clerk/backend +15 · fixed in 2.17.11, 3.0.18, 2.33.3 and more
- CVE-2026-44643Angular Expressions - Remote Code Execution using filtersnpm · angular-expressions · fixed in 1.5.2
- CVE-2026-30635Command injection vulnerability in automagik-genie 2.5.27 MCP Server allows attackers to execute arbitrary commands via the view_task (aka vnpm · automagik-genie
- CVE-2026-41893Signal K Server's WebSocket Login Endpoint Lacks Rate Limiting (Credential Brute-Force)npm · signalk-server · fixed in 2.25.0
- CVE-2026-41311LiquidJS is vulnerable to Denial of Service via circular block reference in layoutnpm · liquidjs · fixed in 10.25.7
- CVE-2026-42190RedwoodSDK: Same-site CSRF in in server actionsnpm · rwsdk · fixed in 1.2.3
- CVE-2026-44694n8n-MCP: Authenticated SSRF in n8n-mcp webhook and API client pathsnpm · n8n-mcp · fixed in 2.50.2
- CVE-2026-42282n8n-MCP: Sensitive MCP tool-call arguments logged on authenticated requests in HTTP modenpm · n8n-mcp · fixed in 2.47.13
- CVE-2026-41495n8n-MCP Logs Sensitive Request Data on Unauthorized /mcp Requestsnpm · n8n-mcp · fixed in 2.47.11
- CVE-2026-41886locize Client SDK: Cross-origin DOM XSS & Handler Hijack Through Missing e.origin Validation in InContext Editornpm · locize · fixed in 4.0.21
- CVE-2026-41885Path traversal / URL injection via unsanitised lng/ns/projectId/version in i18next-locize-backendnpm · i18next-locize-backend · fixed in 9.0.2
- CVE-2026-41693i18next-fs-backend: Path traversal via unsanitised lng/ns allows arbitrary file read/overwritenpm · i18next-fs-backend · fixed in 2.6.4
- CVE-2026-42353Path traversal / SSRF in i18next-http-middleware via user-controlled language and namespace parametersnpm · i18next-http-middleware · fixed in 3.9.3
- CVE-2026-41683HTTP response splitting and DoS in i18next-http-middleware via unsanitised Content-Language headernpm · i18next-http-middleware · fixed in 3.9.3
- CVE-2026-41690Prototype pollution and path traversal in i18next-http-middleware via user-controlled language and namespace parametersnpm · i18next-http-middleware · fixed in 3.9.3
- CVE-2026-41591Marko: XSS via case-insensitive script/style closing tag bypass in runtime HTML escapingnpm · @marko/runtime-tags, marko · fixed in 6.0.164, 5.38.36
- CVE-2026-41507Remote Code Execution (RCE) via String Literal Injection into math-codegennpm · math-codegen · fixed in 0.4.3
- CVE-2026-41423Angular: SSRF via protocol-relative and backslash URLs in Angular Platform-Servernpm · @angular/platform-server · fixed in 22.0.0-next.8, 21.2.9, 20.3.19 and more
- CVE-2026-41161Username Enumeration via Timing Attacknpm · @sync-in/server · fixed in 2.2.0
- CVE-2026-41900OpenLearnX has Critical Remote Code Execution Through Python Sandbox Escape via Code Execution Environmentnpm · openlearnx · fixed in 2.0.3
- CVE-2026-42264Axios: Prototype pollution read-side gadgets in HTTP adapter allow credential injection and request hijackingnpm · axios · fixed in 1.15.2
- CVE-2026-43944electerm: dangerous code can be run through links or command linenpm · electerm · fixed in 3.8.8
- CVE-2026-43942electerm: Full process.env exposed to renderer via window.pre.env in electermnpm · electerm