Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-41914OpenClaw < 2026.4.8 - Server-Side Request Forgery in QQ Bot Media Fetch Pathsnpm · openclaw · fixed in 2026.4.8
- CVE-2026-41913OpenClaw < 2026.4.4 - Rate-Limit Bypass via Concurrent Async Authentication Attemptsnpm · openclaw · fixed in 2026.4.4
- CVE-2026-41912OpenClaw < 2026.4.8 - Server-Side Request Forgery Policy Bypass via Interaction-Triggered Navigationnpm · openclaw · fixed in 2026.4.8
- CVE-2026-41911OpenClaw < 2026.4.8 - Workspace-Only Filesystem Policy Bypass via docx upload_file/upload_imagenpm · openclaw · fixed in 2026.4.8
- CVE-2026-41910OpenClaw < 2026.4.8 - Missing Owner-Only Enforcement in /allowlist Cross-Channel Writesnpm · openclaw · fixed in 2026.4.8
- CVE-2026-41408OpenClaw < 2026.3.31 - Disk Exhaustion via Media Download Bypassnpm · openclaw · fixed in 2026.3.31
- CVE-2026-41407OpenClaw < 2026.4.2 - Timing Side Channel in Shared-Secret Comparisonnpm · openclaw · fixed in 2026.4.2
- CVE-2026-41406OpenClaw < 2026.3.31 - Sender Allowlist Bypass via Thread History and Quoted Messagesnpm · openclaw · fixed in 2026.3.31
- CVE-2026-41405OpenClaw < 2026.3.31 - Resource Exhaustion via Unauthenticated MS Teams Webhook Body Parsingnpm · openclaw · fixed in 2026.3.31
- CVE-2026-41404OpenClaw < 2026.3.31 - Operator Admin Privilege Escalation via Trusted-Proxy Authenticationnpm · openclaw · fixed in 2026.3.31
- CVE-2026-41403OpenClaw < 2026.3.31 - Access Control Bypass via Proxied Remote Request Misclassificationnpm · openclaw · fixed in 2026.3.31
- CVE-2026-41402OpenClaw < 2026.3.31 - Webhook Replay Cache Cross-Target messageId Scope Bypassnpm · openclaw · fixed in 2026.3.31
- CVE-2026-41400OpenClaw < 2026.3.31 - Resource Consumption via Oversized WebSocket Frames in voice-callnpm · openclaw · fixed in 2026.3.31
- CVE-2026-41399OpenClaw < 2026.3.28 - Denial of Service via Unbounded Pre-auth WebSocket Upgradesnpm · openclaw · fixed in 2026.3.28
- CVE-2026-41398OpenClaw - Unauthorized Agent Request Dispatch via Untrusted Local-Network Pages in iOS A2UI Bridgenpm · openclaw · fixed in 2026.4.2
- CVE-2026-41397OpenClaw < 2026.3.31 - Sandbox Escape via Unrestricted File Sync and Symlink Traversalnpm · openclaw · fixed in 2026.3.31
- CVE-2026-41396OpenClaw < 2026.3.31 - Environment Variable Override of Plugin Trust Rootnpm · openclaw · fixed in 2026.3.31
- CVE-2026-41395OpenClaw < 2026.3.28 - Webhook Replay via Query Parameter Reordering in Plivo V3npm · openclaw · fixed in 2026.3.28
- CVE-2026-41394OpenClaw < 2026.3.31 - Unauthorized Operator Scope Access in Unauthenticated Plugin-Auth Routesnpm · openclaw · fixed in 2026.3.31
- CVE-2026-41393OpenClaw < 2026.3.31 - Arbitrary DNS Authority Acceptance and Credential Exfiltration via Wide-Area Discoverynpm · openclaw · fixed in 2026.3.31
- CVE-2026-41392OpenClaw < 2026.3.31 - Exec Allowlist Bypass via Shell Init-File Optionsnpm · openclaw · fixed in 2026.3.31
- CVE-2026-41391OpenClaw < 2026.3.31 - Environment Variable Bypass in Package Index URL Handlingnpm · openclaw · fixed in 2026.3.31
- CVE-2026-41390OpenClaw < 2026.3.28 - Exec Allowlist Bypass via Unregistered /usr/bin/script Wrappernpm · openclaw · fixed in 2026.3.28
- CVE-2026-41388OpenClaw < 2026.3.31 - Configuration Rehydration via Empty-Array Revocation Handlingnpm · openclaw · fixed in 2026.3.31
- CVE-2026-41387OpenClaw < 2026.3.22 - Supply Chain Redirection via Incomplete Host Environment Sanitizationnpm · openclaw · fixed in 2026.3.22
- CVE-2026-41386OpenClaw < 2026.3.22 - Privilege Escalation via Unbound Bootstrap Setup Codesnpm · openclaw · fixed in 2026.3.22
- CVE-2026-41385OpenClaw < 2026.3.31 - Nostr Private Key Exposure via config.get Redaction Bypassnpm · openclaw · fixed in 2026.3.31
- CVE-2026-41384OpenClaw < 2026.3.24 - Environment Variable Injection via Workspace Config in CLI Backendnpm · openclaw · fixed in 2026.3.24
- CVE-2026-41383OpenClaw < 2026.4.2 - Arbitrary Remote Directory Deletion via Mis-scoped Mirror Mode Pathsnpm · openclaw · fixed in 2026.4.2
- CVE-2026-41382OpenClaw < 2026.3.31 - Discord Voice Ingress Authorization Bypass via Channel and Role Validation Gapsnpm · openclaw · fixed in 2026.3.31