Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-33877ApostropheCMS: User Enumeration via Timing Side Channel in Password Reset Endpointnpm · apostrophe · fixed in 4.29.0
- CVE-2026-5758Mafintosh's protocol-buffers-schema is vulnerable to prototype pollutionnpm · protocol-buffers-schema · fixed in 3.6.1
- CVE-2026-33805@fastify/reply-from vulnerable to connection header abuse enabling stripping of proxy-added headersnpm · @fastify/http-proxy, @fastify/reply-from · fixed in 11.4.4, 12.6.2
- CVE-2026-33807@fastify/express vulnerable to middleware path doubling causing authentication bypass in child plugin scopesnpm · @fastify/express · fixed in 4.0.5
- CVE-2026-33808@fastify/express vulnerable to middleware authentication bypass via URL normalization gaps (duplicate slashes and semicolons)npm · @fastify/express · fixed in 4.0.5
- CVE-2026-33806fastify vulnerable to Body Schema Validation Bypass via Leading Space in Content-Type Headernpm · fastify · fixed in 5.3.2, 4.29.1, 5.8.5
- CVE-2026-39884MCP Server Kubernetes has Argument Injection in its port_forward tool via space-splittingnpm · mcp-server-kubernetes · fixed in 3.5.0
- GHSA-4X48-CGF9-Q33FNovu has SSRF via conditions filter webhook bypasses validateUrlSsrf() protectionnpm · @novu/api · fixed in 3.15.0
- CVE-2025-13822Authentication bypass in MCPHubnpm · @samanhappy/mcphub · fixed in 0.11.0
- CVE-2025-61260A vulnerability was identified in OpenAI Codex CLI v0.23.0 and before that enables code execution through malicious MCP (Model Context Protonpm · @openai/codex
- CVE-2026-6216DbGate SVG Icon String FontIcon.svelte cross site scriptingnpm · dbgate-web · fixed in 7.1.5
- CVE-2026-28291simple-git has Command Execution via Option-Parsing Bypassnpm · simple-git · fixed in 3.32.0
- CVE-2026-3691OpenClaw Client PKCE Verifier Information Disclosure Vulnerabilitynpm · openclaw · fixed in 2026.2.25
- CVE-2026-3690OpenClaw Canvas Authentication Bypass Vulnerabilitynpm · openclaw · fixed in 2026.2.19
- CVE-2026-3689OpenClaw Canvas Path Traversal Information Disclosure Vulnerabilitynpm · openclaw · fixed in 2026.2.21
- CVE-2026-40190LangSmith Client SDKs has Prototype Pollution in langsmith-sdk via Incomplete `__proto__` Guard in Internal lodash `set()`npm · langsmith · fixed in 0.5.18
- CVE-2026-40175Axios has Unrestricted Cloud Metadata Exfiltration via Header Injection Chainnpm · axios · fixed in 1.15.0, 0.31.0
- CVE-2026-40163Saltcorn has an Unauthenticated Path Traversal in sync endpoints allows arbitrary file write and directory readnpm · @saltcorn/server · fixed in 1.4.5, 1.5.5, 1.6.0-beta.4
- CVE-2026-40074SvelteKit's invalidated redirect in handle hook causes Denial-of-Servicenpm · @sveltejs/kit · fixed in 2.57.1
- CVE-2026-40073SvelteKit has a BODY_SIZE_LIMIT bypass in @sveltejs/adapter-nodenpm · @sveltejs/kit · fixed in 2.57.1
- CVE-2026-35670OpenClaw < 2026.3.22 - Webhook Reply Rebinding via Username Resolution in Synology Chatnpm · openclaw · fixed in 2026.3.22
- CVE-2026-35669OpenClaw < 2026.3.25 - Privilege Escalation via Gateway Plugin HTTP Authentication Scopenpm · openclaw
- CVE-2026-35668OpenClaw < 2026.3.24 - Sandbox Media Root Bypass via Unnormalized mediaUrl and fileUrl Parametersnpm · openclaw · fixed in 2026.3.24
- CVE-2026-35667OpenClaw < 2026.3.24 - Improper Process Termination via Unpatched killProcessTree in shell-utils.tsnpm · openclaw · fixed in 2026.3.24
- CVE-2026-35666OpenClaw < 2026.3.22 - Allowlist Bypass via Unregistered Time Dispatch Wrappernpm · openclaw · fixed in 2026.3.22
- CVE-2026-35665OpenClaw < 2026.3.24 - Denial of Service via Feishu Webhook Pre-Auth Body Parsingnpm · openclaw · fixed in 2026.3.24
- CVE-2026-35664OpenClaw < 2026.3.25 - DM Pairing Bypass via Legacy Card Callbacksnpm · openclaw · fixed in 2026.3.28
- CVE-2026-35663OpenClaw < 2026.3.25 - Privilege Escalation via Backend Reconnect Scope Self-Claimnpm · openclaw
- CVE-2026-35662OpenClaw < 2026.3.22 - Missing controlScope Enforcement in Send Actionnpm · openclaw · fixed in 2026.3.22
- CVE-2026-35661OpenClaw < 2026.3.25 - Telegram DM-Scoped Inline Button Callback Authorization Bypassnpm · openclaw · fixed in 2026.3.28