Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-41381OpenClaw < 2026.3.31 - Access Control Bypass in Discord Voice Manager via Channel Allowlistnpm · openclaw · fixed in 2026.3.31
- CVE-2026-41380OpenClaw < 2026.3.28 - Arbitrary Execution Allowlist via Wrapper Carrier Executablesnpm · openclaw · fixed in 2026.3.28
- CVE-2026-41379OpenClaw < 2026.3.28 - Privilege Escalation via chat.send to Admin-Class Talk Voice Confignpm · openclaw · fixed in 2026.3.28
- CVE-2026-41378OpenClaw < 2026.3.31 - Privilege Escalation to Remote Code Execution via Unrestricted node.event Agent Dispatchnpm · openclaw · fixed in 2026.3.31
- CVE-2026-41377OpenClaw < 2026.3.31 - Fail-Open Security Scan Bypass in Plugin Installationnpm · openclaw · fixed in 2026.3.31
- CVE-2026-41376OpenClaw < 2026.3.31 - Matrix Thread Context Allowlist Bypass via Sender Validationnpm · openclaw · fixed in 2026.3.31
- CVE-2026-41375OpenClaw < 2026.3.28 - Authorization Bypass in /phone arm and /phone disarm Endpointsnpm · openclaw · fixed in 2026.3.28
- CVE-2026-41374OpenClaw < 2026.3.31 - Resource Consumption via Discord Audio Preflight Before Member Authorizationnpm · openclaw · fixed in 2026.3.31
- CVE-2026-41373OpenClaw < 2026.3.31 - Compiler Binary Substitution via Environment Variable Override in Host Execution Policynpm · openclaw · fixed in 2026.3.31
- CVE-2026-41636Apache Thrift: Node.js skip() recursionnpm · thrift · fixed in 0.23.0
- CVE-2026-7223BigSweetPotatoStudio HyperChat AI Proxy Middleware aiProxyMiddleware.mts fetch server-side request forgerynpm · @dadigua/hyperchat
- CVE-2026-41372OpenClaw < 2026.4.2 - Loopback Protection Bypass via Trailing-Dot Localhost in CDP Discoverynpm · openclaw · fixed in 2026.4.2
- CVE-2026-41371OpenClaw < 2026.3.28 - Privilege Escalation via chat.send Reset Commandnpm · openclaw · fixed in 2026.3.28
- CVE-2026-41370OpenClaw < 2026.3.31 - Path Traversal via Inbound Channel Attachment Path in ACP Dispatchnpm · openclaw · fixed in 2026.3.31
- CVE-2026-41369OpenClaw < 2026.3.31 - Insufficient Environment Variable Sanitization in Host Executionnpm · openclaw · fixed in 2026.3.31
- CVE-2026-41368OpenClaw < 2026.3.28 - Environment Variable Disclosure via jq $ENV Filter Bypassnpm · openclaw · fixed in 2026.3.28
- CVE-2026-41367OpenClaw 2026.2.14 < 2026.3.28 - Policy Enforcement Bypass in Discord Component Interactionsnpm · openclaw · fixed in 2026.3.28
- CVE-2026-41366OpenClaw < 2026.3.31 - Arbitrary Host File Read via appendLocalMediaParentRoots Self-Whitelistingnpm · openclaw · fixed in 2026.3.31
- CVE-2026-41365OpenClaw < 2026.3.31 - Sender Allowlist Bypass via Graph API Thread Historynpm · openclaw · fixed in 2026.3.31
- CVE-2026-41364OpenClaw < 2026.3.31 - Arbitrary File Write via Symlink Following in SSH Sandbox Tar Uploadnpm · openclaw · fixed in 2026.3.31
- CVE-2026-41363OpenClaw 2026.2.6 < 2026.3.28 - Arbitrary File Read via Feishu upload_image Parameternpm · openclaw · fixed in 2026.3.28
- CVE-2026-41362OpenClaw 2026.2.19 through 2026.3.30 - Webhook Replay Dedupe Cache Event Suppression via Shared Authenticationnpm · openclaw · fixed in 2026.3.31
- CVE-2026-6951Versions of the package simple-git before 3.36.0 are vulnerable to Remote Code Execution (RCE) due to an incomplete fix for [CVE-2022-25912]npm · simple-git · fixed in 3.36.0
- CVE-2026-41248Official Clerk JavaScript SDKs: Middleware-based route protection bypassnpm · @clerk/astro, @clerk/nextjs +2 · fixed in 1.5.7, 2.17.10, 3.0.15 and more
- CVE-2026-41478Saltcorn: SQL Injection via Unparameterized Sync Endpoints (maxLoadedId)npm · @saltcorn/server · fixed in 1.4.6, 1.5.6, 1.6.0-beta.5
- CVE-2026-41427Better Auth OAuth 2.1 Provider: Unprivileged users can register OAuth clientsnpm · @better-auth/oauth-provider · fixed in 1.6.5
- CVE-2026-41428Budibase: Authentication Bypass via Unanchored Regex in Public Endpoint Matcher — Unauthenticated Access to Protected Endpointsnpm · @budibase/backend-core
- CVE-2026-41244Mojic: Observable Timing Discrepancy in HMAC Verificationnpm · mojic · fixed in 2.1.4
- CVE-2026-41907uuid: Missing buffer bounds check in `v3`/`v5`/`v6` when `buf` is providednpm · uuid · fixed in 11.1.1, 12.0.1, 13.0.1
- CVE-2026-42042Axios: XSRF Token Cross-Origin Leakage via Prototype Pollution Gadget in `withXSRFToken` Boolean Coercionnpm · axios · fixed in 1.15.1, 0.31.1