Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-42227n8n: Public API Variables IDOR Allows Cross-Project Secret Disclosurenpm · n8n · fixed in 1.123.32, 2.18.1, 2.17.4
- CVE-2026-42226n8n: Credential Authorization Bypass in dynamic-node-parameters Allows Foreign API Key Replaynpm · n8n · fixed in 2.17.5, 1.123.33
- CVE-2026-42077Evolver: Prototype Pollution via `Object.assign()` in mailbox store operationsnpm · @evomap/evolver · fixed in 1.69.3
- CVE-2026-42076Evolver: Command Injection via `execSync` in `_extractLLM()` function allows Remote Code Executionnpm · @evomap/evolver · fixed in 1.69.3
- CVE-2026-42075Evolver: Path Traversal via `--out` flag in `fetch` command allows Arbitrary File Writenpm · @evomap/evolver · fixed in 1.69.3
- CVE-2026-26956vm2: WASM Sandbox Escape (Node 25 only)npm · vm2 · fixed in 3.10.5
- CVE-2026-26332vm2: Sandbox Escapenpm · vm2 · fixed in 3.11.0
- CVE-2026-24781vm2: Sandbox Breakout Through Inspectnpm · vm2 · fixed in 3.11.0
- CVE-2026-24120vm2: Sandbox Breakout Through Promise Speciesnpm · vm2 · fixed in 3.10.5
- CVE-2026-24118VM2 Sandbox Breakout Through lookupGetternpm · vm2 · fixed in 3.11.0
- CVE-2026-7738puchunjie doc-tools-mcp MCP mcp-server.ts open_document path traversalnpm · @puchunjie/doc-tools-mcp
- CVE-2026-7645ruvnet sublinear-time-solver MCP server.js export_state path traversalnpm · sublinear-time-solver
- CVE-2026-7600ArtMin96 yii2-mcp-server MCP index.ts yii_execute_command os command injectionnpm · yii2-mcp-server
- CVE-2026-40201@diplodoc/search-extension 1.0.0 through 3.x before 3.0.3 allows stored XSS via the title in a .md file.npm · @diplodoc/search-extension · fixed in 3.0.5
- CVE-2026-7446VetCoders mcp-server-semgrep MCP index.ts create_rule os command injectionnpm · mcp-server-semgrep · fixed in 1.0.1
- CVE-2026-42615GCHQ CyberChef before 11.0.0 allows XSS via Show Base64 offsets, as demonstrated by the /#recipe=Show_Base64_offsets('%3Cscript substring.npm · cyberchef · fixed in 11.0.0
- CVE-2026-42432OpenClaw < 2026.4.8 - Command Escalation via Node Pairing Reconnect Bypassnpm · openclaw · fixed in 2026.4.8
- CVE-2026-42431OpenClaw < 2026.4.8 - Persistent Profile Mutation via node.invoke(browser.proxy) Bypassnpm · openclaw · fixed in 2026.4.8
- CVE-2026-42430OpenClaw < 2026.4.8 - Strict Browser SSRF Bypass via Playwright Redirect Handlingnpm · openclaw · fixed in 2026.4.8
- CVE-2026-42429OpenClaw < 2026.4.8 - Privilege Escalation via Gateway Plugin HTTP Authenticationnpm · openclaw · fixed in 2026.4.8
- CVE-2026-42428OpenClaw < 2026.4.8 - Missing Integrity Verification in Package Downloadsnpm · openclaw · fixed in 2026.4.8
- CVE-2026-42427OpenClaw < 2026.4.8 - Remote Code Execution via Build Tool Environment Variable Injectionnpm · openclaw · fixed in 2026.4.8
- CVE-2026-42426OpenClaw < 2026.4.8 - Improper Authorization in node.pair.approve via operator.write Scopenpm · openclaw · fixed in 2026.4.8
- CVE-2026-42424OpenClaw < 2026.4.8 - Local File Exfiltration via Shared Reply MEDIA Pathsnpm · openclaw · fixed in 2026.4.8
- CVE-2026-42423OpenClaw < 2026.4.8 - strictInlineEval Approval Boundary Bypass via Approval-Timeout Fallbacknpm · openclaw · fixed in 2026.4.8
- CVE-2026-42422OpenClaw < 2026.4.8 - Role Bypass in device.token.rotate Functionnpm · openclaw · fixed in 2026.4.8
- CVE-2026-42421OpenClaw < 2026.4.8 - WebSocket Session Persistence via Shared Gateway Token Rotationnpm · openclaw · fixed in 2026.4.8
- CVE-2026-42420OpenClaw < 2026.4.8 - Improper Base64 Decoding Size Validationnpm · openclaw · fixed in 2026.4.8
- CVE-2026-41916OpenClaw < 2026.4.8 - Stale Authentication State via Config Reloadnpm · openclaw · fixed in 2026.4.8
- CVE-2026-41915OpenClaw < 2026.4.8 - Git Environment Variable Injection via Unfiltered Exec Environmentnpm · openclaw · fixed in 2026.4.8