Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-43533OpenClaw < 2026.4.10 - Arbitrary Local File Read via QQBot Media Tagsnpm · openclaw · fixed in 2026.4.10
- CVE-2026-43532OpenClaw 2026.4.7 < 2026.4.10 - Sandbox Media Normalization Bypass via Discord Event Cover Imagenpm · openclaw · fixed in 2026.4.10
- CVE-2026-43531OpenClaw < 2026.4.9 - Environment Variable Injection via Workspace .env Filenpm · openclaw · fixed in 2026.4.9
- CVE-2026-43530OpenClaw 2026.2.23 < 2026.4.12 - Weakened Exec Approval Binding via busybox and toybox Applet Executionnpm · openclaw · fixed in 2026.4.12
- CVE-2026-43529OpenClaw < 2026.4.10 - Time-of-Check-Time-of-Use (TOCTOU) Race Condition in exec Script Preflight Validatornpm · openclaw · fixed in 2026.4.10
- CVE-2026-43528OpenClaw < 2026.4.14 - Redaction Bypass via sourceConfig and runtimeConfig Aliasesnpm · openclaw · fixed in 2026.4.14
- CVE-2026-43527OpenClaw < 2026.4.14 - Server-Side Request Forgery via Private Network Navigationnpm · openclaw · fixed in 2026.4.14
- CVE-2026-43526OpenClaw < 2026.4.12 - Server-Side Request Forgery via QQBot Reply Media URL Handlingnpm · openclaw · fixed in 2026.4.12
- CVE-2026-42439OpenClaw < 2026.4.10 - SSRF Policy Bypass in Browser Tabs Action Routesnpm · openclaw · fixed in 2026.4.10
- CVE-2026-42438OpenClaw 2026.4.9 < 2026.4.10 - Sender Policy Bypass in Host Media Attachment Readsnpm · openclaw · fixed in 2026.4.10
- CVE-2026-42437OpenClaw 2026.4.9 < 2026.4.10 - Denial of Service via Oversized WebSocket Frames in Voice-call Realtime Pathnpm · openclaw · fixed in 2026.4.10
- CVE-2026-42436OpenClaw < 2026.4.14 - Internal Page Content Exposure via Browser Snapshot and Screenshot Routesnpm · openclaw · fixed in 2026.4.14
- CVE-2026-42435OpenClaw 2026.2.22 < 2026.4.12 - Shell-Wrapper Detection Bypass via Environment Variable Assignment Injectionnpm · openclaw · fixed in 2026.4.12
- CVE-2026-42434OpenClaw 2026.4.5 < 2026.4.10 - Sandbox Escape via host Parameter Override in Exec Routingnpm · openclaw · fixed in 2026.4.10
- CVE-2026-42433OpenClaw < 2026.4.10 - Unauthorized Matrix Profile Config Persistence Access via operator.write Message Toolsnpm · openclaw · fixed in 2026.4.10
- CVE-2026-6322fast-uri vulnerable to host confusion via percent-encoded authority delimitersnpm · fast-uri · fixed in 3.1.2, 2.4.1
- CVE-2026-43870Apache Thrift: Node.js web_server.js multi-vulnerabilitynpm · thrift
- CVE-2026-6321fast-uri vulnerable to path traversal via percent-encoded dot segmentsnpm · fast-uri · fixed in 3.1.1, 2.4.1
- CVE-2026-7768@fastify/accepts-serializer vulnerable to Denial of Service via Unbounded Accept Header Cache Growthnpm · @fastify/accepts-serializer · fixed in 6.0.4
- CVE-2026-41686Claude SDK for TypeScript has Insecure Default File Permissions in Local Filesystem Memory Toolnpm · @anthropic-ai/sdk · fixed in 0.91.1
- CVE-2026-42237n8n: SQL Injection in Snowflake and MySQL Nodesnpm · n8n · fixed in 1.123.32, 2.18.1, 2.17.4
- CVE-2026-42236n8n: Unauthenticated Denial of Service via MCP Client Registrationnpm · n8n · fixed in 1.123.32, 2.18.1, 2.17.4
- CVE-2026-42235n8n: XSS via MCP OAuth clientnpm · n8n · fixed in 1.123.32, 2.18.1, 2.17.4
- CVE-2026-42234n8n: Python Task Runner Sandbox Escapenpm · n8n · fixed in 1.123.32, 2.18.1, 2.17.4
- CVE-2026-42233n8n: SQL Injection in Oracle Database Node via Limit Fieldnpm · n8n · fixed in 1.123.32, 2.18.1, 2.17.4
- CVE-2026-42232n8n: XML Node Prototype Pollution to RCEnpm · n8n · fixed in 2.18.1, 2.17.4, 1.123.32
- CVE-2026-42231n8n: Prototype Pollution in XML Webhook Body Parser Leads to RCEnpm · n8n · fixed in 1.123.32, 2.18.1, 2.17.4
- CVE-2026-42230n8n: Open Redirect in MCP OAuth Consent Flownpm · n8n · fixed in 1.123.32, 2.18.1, 2.17.4
- CVE-2026-42229n8n: SQL Injection in SeaTable Nodenpm · n8n · fixed in 1.123.32, 2.18.1, 2.17.4
- CVE-2026-42228n8n: Hijacking of Unauthenticated Chat Executionnpm · n8n · fixed in 1.123.32, 2.18.1, 2.17.4