Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-35660OpenClaw < 2026.3.23 - Insufficient Access Control in Gateway Agent Session Resetnpm · openclaw · fixed in 2026.3.23
- CVE-2026-35659OpenClaw < 2026.3.22 - Unresolved Service Metadata Routing via Bonjour and DNS-SD Discoverynpm · openclaw · fixed in 2026.3.22
- CVE-2026-35658OpenClaw < 2026.3.2 - Filesystem Boundary Bypass in Image Toolnpm · openclaw · fixed in 2026.3.2
- CVE-2026-35657OpenClaw < 2026.3.25 - Authorization Bypass in HTTP Session History Routenpm · openclaw · fixed in 2026.3.25
- CVE-2026-35656OpenClaw < 2026.3.22 - XFF Loopback Spoofing Bypass in Canvas Authentication and Rate Limiternpm · openclaw · fixed in 2026.3.22
- CVE-2026-35655OpenClaw < 2026.3.22 - Identity Spoofing via rawInput Tool in ACP Permission Resolutionnpm · openclaw · fixed in 2026.3.22
- CVE-2026-35654OpenClaw < 2026.3.25 - Authorization Bypass in Microsoft Teams Feedback Invokenpm · openclaw · fixed in 2026.3.28
- CVE-2026-35653OpenClaw < 2026.3.24 - Incorrect Authorization in POST /reset-profile via browser.requestnpm · openclaw · fixed in 2026.3.24
- CVE-2026-35652OpenClaw < 2026.3.22 - Unauthorized Action Execution via Callback Dispatchnpm · openclaw · fixed in 2026.3.22
- CVE-2026-35651OpenClaw 2026.2.13 < 2026.3.25 - ANSI Escape Sequence Injection in Approval Promptnpm · openclaw · fixed in 2026.3.28
- CVE-2026-35650OpenClaw < 2026.3.22 - Environment Variable Override Bypass via Inconsistent Sanitizationnpm · openclaw · fixed in 2026.3.22
- CVE-2026-35649OpenClaw < 2026.3.22 - Settings Reconciliation Bypass via Empty Allowlistnpm · openclaw · fixed in 2026.3.22
- CVE-2026-35648OpenClaw < 2026.3.22 - Policy Bypass via Unvalidated Queued Node Actionsnpm · openclaw · fixed in 2026.3.22
- CVE-2026-35647OpenClaw < 2026.3.25 - Direct Message Policy Bypass via Verification Noticesnpm · openclaw
- CVE-2026-35643OpenClaw < 2026.3.22 - Arbitrary Code Execution via Unvalidated WebView JavascriptInterfacenpm · openclaw · fixed in 2026.3.22
- CVE-2026-35641OpenClaw < 2026.3.24 - Arbitrary Code Execution via .npmrc in Local Plugin/Hook Installationnpm · openclaw · fixed in 2026.3.24
- CVE-2026-35621OpenClaw < 2026.3.24 - Privilege Escalation via chat.send to Allowlist Persistencenpm · openclaw · fixed in 2026.3.24
- CVE-2026-35620OpenClaw < 2026.3.24 - Missing Authorization in /send and /allowlist Chat Commandsnpm · openclaw · fixed in 2026.3.24
- CVE-2026-35619OpenClaw < 2026.3.24 - Authorization Bypass via HTTP /v1/models Endpointnpm · openclaw · fixed in 2026.3.24
- CVE-2026-6011OpenClaw assertPublicHostname web-fetch.ts server-side request forgerynpm · openclaw · fixed in 2026.1.29
- CVE-2026-5986Zod jsVideoUrlParser util.js getTime redosnpm · js-video-url-parser
- CVE-2026-35646OpenClaw < 2026.3.25 - Pre-Authentication Rate-Limit Bypass in Webhook Token Validationnpm · openclaw · fixed in 2026.3.28
- CVE-2026-35645OpenClaw < 2026.3.25 - Privilege Escalation via Synthetic operator.admin in deleteSessionnpm · openclaw · fixed in 2026.3.28
- CVE-2026-35644OpenClaw < 2026.3.22 - Credential Exposure via baseUrl Fields in Gateway Snapshotsnpm · openclaw · fixed in 2026.3.22
- CVE-2026-35642OpenClaw < 2026.3.25 - Authorization Bypass in Group Reactions via requireMention Bypassnpm · openclaw
- CVE-2026-35640OpenClaw < 2026.3.25 - Denial of Service via Unauthenticated Webhook Request Parsingnpm · openclaw · fixed in 2026.3.28
- CVE-2026-35639OpenClaw < 2026.3.22 - Privilege Escalation via device.pair.approve Scope Validationnpm · openclaw · fixed in 2026.3.22
- CVE-2026-35638OpenClaw < 2026.3.22 - Privilege Escalation via Self-Declared Scopes in Trusted-Proxy Control UInpm · openclaw · fixed in 2026.3.22
- CVE-2026-35637OpenClaw < 2026.3.22 - Premature Cite Expansion Before Authorization in Channel and DMnpm · openclaw · fixed in 2026.3.22
- CVE-2026-35636OpenClaw 2026.3.11 < 2026.3.25 - Session Isolation Bypass via sessionId Resolutionnpm · openclaw · fixed in 2026.3.28