Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-41270Flowise: SSRF Protection Bypass via Unprotected Built-in HTTP Modules in Custom Function Sandboxnpm · flowise, flowise-components · fixed in 3.1.0
- CVE-2026-41269Flowise: File Upload Validation Bypass in createAttachmentnpm · flowise · fixed in 3.1.0
- CVE-2026-41268Flowise: Flowise Parameter Override Bypass Remote Command Executionnpm · flowise, flowise-components · fixed in 3.1.0
- CVE-2026-41267Flowise: Improper Mass Assignment in Account Registration Enables Unauthorized Organization Associationnpm · flowise · fixed in 3.1.0
- CVE-2026-41266Flowise: Sensitive Data Leak in public-chatbotConfignpm · flowise · fixed in 3.1.0
- CVE-2026-41137Flowise: Code Injection in CSVAgent leads to Authenticated RCEnpm · flowise, flowise-components · fixed in 3.1.0
- CVE-2026-41138Flowise: Remote code execution vulnerability in AirtableAgent.ts caused by lack of input verification when using Pandas.npm · flowise, flowise-components · fixed in 3.1.0
- CVE-2026-41213@node-oauth/oauth2-server: PKCE code_verifier ABNF not enforced in token exchange allows brute-force redemption of intercepted authorization codesnpm · @node-oauth/oauth2-server · fixed in 5.3.0
- CVE-2026-41909OpenClaw < 2026.4.20 - Improper Authorization in Paired-Device Pairing Actionsnpm · openclaw · fixed in 2026.4.20
- CVE-2026-41908OpenClaw < 2026.4.20 - Scope Enforcement Bypass in Assistant-Media Routenpm · openclaw · fixed in 2026.4.20
- CVE-2026-41240DOMPurify: FORBID_TAGS bypassed by function-based ADD_TAGS predicate (asymmetry with FORBID_ATTR fix)npm · dompurify · fixed in 3.4.0
- CVE-2026-41239DOMPurify has a SAFE_FOR_TEMPLATES bypass in RETURN_DOM modenpm · dompurify · fixed in 3.4.0
- CVE-2026-41238DOMPurify: Prototype Pollution to XSS Bypass via CUSTOM_ELEMENT_HANDLING Fallbacknpm · dompurify · fixed in 3.4.0
- CVE-2026-41988uuid before 14.0.0 can make unexpected writes when external output buffers are used, and the UUID version is 3, 5, or 6.npm · uuid · fixed in 11.1.1, 12.0.1, 13.0.1
- CVE-2026-41211`vite-plus/binding` has path traversal `downloadPackageManager()` that leads to writes outside of `VP_HOME`npm · vite-plus · fixed in 0.1.17
- CVE-2026-41679Paperclip Vulnerable to Unauthenticated Remote Code Execution via Import Authorization Bypassnpm · @paperclipai/server, paperclipai · fixed in 2026.410.0
- CVE-2026-41208Paperclip: Privilege Escalation via Agent-Controlled workspaceStrategy.provisionCommand Leading to OS Command Executionnpm · @paperclipai/server · fixed in 2026.416.0
- CVE-2026-41182LangSmith SDK: Streaming token events bypass output redactionnpm · langsmith · fixed in 0.5.19
- CVE-2026-41180PsiTransfer: Upload PATCH path traversal can create `config.<NODE_ENV>.js` and lead to code execution on restartnpm · psitransfer · fixed in 2.4.3
- CVE-2026-6874ericc-ch copilot-api Header token dns rebindingnpm · copilot-api
- CVE-2026-40933Flowise: Authenticated RCE Via MCP Adaptersnpm · flowise, flowise-components · fixed in 3.1.0
- CVE-2026-40931Complete Bypass of CVE-2026-24884 Patch via Git-Delivered Symlink Poisoning in compressingnpm · compressing · fixed in 2.1.1, 1.10.5
- CVE-2026-40895follow-redirects: Custom Authentication Headers Leaked to Cross-Domain Redirect Targetsnpm · follow-redirects · fixed in 1.16.0
- CVE-2026-40887@vendure/core has a SQL Injection vulnerabilitynpm · @vendure/core · fixed in 3.5.7, 3.6.2, 2.3.4
- CVE-2026-40879Nest: DoS via Recursive handleData in JsonSocket (TCP Transport)npm · @nestjs/microservices · fixed in 11.1.19
- CVE-2026-39861Claude Code: Sandbox Escape via Symlink Following Allows Arbitrary File Write Outside Workspacenpm · @anthropic-ai/claude-code · fixed in 2.1.64
- CVE-2026-39320Signal K Server has an Unauthenticated Regular Expression Denial of Service (ReDoS) via WebSocket Subscription Pathsnpm · signalk-server · fixed in 2.25.0
- CVE-2026-35570OpenClaude has Sandbox Bypass via Early-Exit Logic Flaw that Allows Path Traversalnpm · @gitlawb/openclaude · fixed in 0.5.1
- CVE-2026-41331OpenClaw < 2026.3.31 - Resource Consumption via Unauthorized Telegram Audio Preflight Transcriptionnpm · openclaw · fixed in 2026.3.31
- CVE-2026-41330OpenClaw < 2026.3.31 - Environment Variable Override via Host Exec Policynpm · openclaw · fixed in 2026.3.31