Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-44113OpenClaw < 2026.4.22 - Time-of-Check/Time-of-Use Race Condition in OpenShell FS Bridgenpm · openclaw · fixed in 2026.4.22
- CVE-2026-44112OpenClaw < 2026.4.22 - Symlink Swap Race Condition in OpenShell FS Bridge Writesnpm · openclaw · fixed in 2026.4.22
- CVE-2026-44111OpenClaw < 2026.4.15 - Arbitrary Markdown File Read via QMD memory_getnpm · openclaw · fixed in 2026.4.15
- CVE-2026-44109OpenClaw < 2026.4.15 - Authentication Bypass in Feishu Webhook and Card-Action Validationnpm · openclaw · fixed in 2026.4.15
- CVE-2026-43585OpenClaw < 2026.4.15 - Bearer Token Validation Bypass via Stale SecretRef Resolutionnpm · openclaw · fixed in 2026.4.15
- CVE-2026-43584OpenClaw < 2026.4.10 - Insufficient Environment Variable Denylist in Exec Policynpm · openclaw · fixed in 2026.4.10
- CVE-2026-43583OpenClaw 2026.4.10 < 2026.4.14 - Loss of Group Tool-Policy Context in Delivery Queue Recoverynpm · openclaw · fixed in 2026.4.14
- CVE-2026-43582OpenClaw < 2026.4.10 - DNS Rebinding SSRF via Hostname Validation Bypassnpm · openclaw · fixed in 2026.4.10
- CVE-2026-43581OpenClaw < 2026.4.10 - Chrome DevTools Protocol Exposure via Overly Broad CDP Relay Bindingnpm · openclaw · fixed in 2026.4.10
- CVE-2026-43580OpenClaw < 2026.4.10 - Incomplete Navigation Guard Coverage in Browser Interactionsnpm · openclaw · fixed in 2026.4.10
- CVE-2026-43579OpenClaw < 2026.4.10 - Insufficient Access Control in Nostr Profile Mutation Routesnpm · openclaw · fixed in 2026.4.10
- CVE-2026-43578OpenClaw 2026.3.31 < 2026.4.10 - Privilege Escalation via Missed Async Exec Completion Events in Heartbeat Owner Downgradenpm · openclaw · fixed in 2026.4.10
- CVE-2026-43577OpenClaw < 2026.4.9 - Arbitrary File Read via Browser Interaction Routesnpm · openclaw · fixed in 2026.4.9
- CVE-2026-43576OpenClaw < 2026.4.5 - Second-hop SSRF via CDP /json/version WebSocket URLnpm · openclaw · fixed in 2026.4.5
- CVE-2026-43575OpenClaw 2026.2.21 < 2026.4.10 - Authentication Bypass in Sandbox noVNC Helper Routenpm · openclaw · fixed in 2026.4.10
- CVE-2026-40171Jupyter Notebook and JupyterLab token theft via stored XSS in help command linkernpm · @jupyter-notebook/help-extension, @jupyterlab/help-extension · fixed in 7.5.6, 4.5.7
- CVE-2026-23870A denial of service vulnerability could be triggered by sending specially crafted HTTP requests to server function endpoints, this could leanpm · react-server-dom-parcel, react-server-dom-turbopack +1 · fixed in 19.0.6, 19.1.7, 19.2.6
- CVE-2026-8026FlowiseAI Flowise API Response account.service.ts login information disclosurenpm · flowise
- CVE-2026-40068Claude Code arbitrary code execution via git worktree commondir trust dialog bypassnpm · @anthropic-ai/claude-code · fixed in 2.1.84
- CVE-2026-43574OpenClaw < 2026.4.12 - Improper Authorization via Empty Approver Listsnpm · openclaw · fixed in 2026.4.12
- CVE-2026-43573OpenClaw < 2026.4.10 - SSRF Policy Bypass in Existing-Session Browser Interaction Routesnpm · openclaw · fixed in 2026.4.10
- CVE-2026-43572OpenClaw 2026.4.10 < 2026.4.14 - Missing Sender Authorization in Microsoft Teams SSO Invoke Handlernpm · openclaw · fixed in 2026.4.14
- CVE-2026-43571OpenClaw < 2026.4.10 - Untrusted Workspace Plugin Shadow Resolution in Channel Setupnpm · openclaw · fixed in 2026.4.10
- CVE-2026-43570OpenClaw 2026.3.22 < 2026.4.5 - Symlink Traversal in Remote Marketplace Repository Path Handlingnpm · openclaw · fixed in 2026.4.5
- CVE-2026-43569OpenClaw < 2026.4.9 - Untrusted Provider Plugin Auto-enablement via Workspace Provider Authnpm · openclaw · fixed in 2026.4.9
- CVE-2026-43568OpenClaw 2026.4.5 through 2026.4.9 - Privilege Escalation via Memory Dreaming Configuration in /dreaming Endpointnpm · openclaw · fixed in 2026.4.10
- CVE-2026-43567OpenClaw < 2026.4.10 - Path Traversal in screen_record outPath Parameternpm · openclaw · fixed in 2026.4.10
- CVE-2026-43566OpenClaw 2026.4.7 < 2026.4.14 - Privilege Escalation via Untrusted Webhook Wake Eventsnpm · openclaw · fixed in 2026.4.14
- CVE-2026-43535OpenClaw < 2026.4.14 - Authorization Context Reuse in Collect-Mode Queue Batchesnpm · openclaw · fixed in 2026.4.14
- CVE-2026-43534OpenClaw < 2026.4.10 - Unsanitized External Input in Agent Hook Eventsnpm · openclaw · fixed in 2026.4.10