Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-35635OpenClaw < 2026.3.22 - Webhook Path Route Replacement Vulnerability in Synology Chatnpm · openclaw · fixed in 2026.3.22
- CVE-2026-35634OpenClaw < 2026.3.23 - Authentication Bypass via Local-Direct Requests in Canvas Gatewaynpm · openclaw · fixed in 2026.3.23
- CVE-2026-35633OpenClaw < 2026.3.22 - Unbounded Memory Allocation via Remote Media Error Responsesnpm · openclaw · fixed in 2026.3.22
- CVE-2026-35632OpenClaw < 2026.3.24 - Symlink Traversal via IDENTITY.md appendFile in agents.create/updatenpm · openclaw
- CVE-2026-35631OpenClaw < 2026.3.22 - Missing Authorization Enforcement in Internal ACP Chat Commandsnpm · openclaw · fixed in 2026.3.22
- CVE-2026-35629OpenClaw < 2026.3.25 - Server-Side Request Forgery via Unguarded Configured Base URLs in Channel Extensionsnpm · openclaw · fixed in 2026.3.28
- CVE-2026-35628OpenClaw < 2026.3.25 - Brute-Force Attack via Missing Telegram Webhook Rate Limitingnpm · openclaw
- CVE-2026-35627OpenClaw < 2026.3.22 - Unauthenticated Cryptographic Work in Nostr Inbound DM Handlingnpm · openclaw · fixed in 2026.3.22
- CVE-2026-35626OpenClaw < 2026.3.22 - Unauthenticated Resource Exhaustion via Voice Call Webhooknpm · openclaw · fixed in 2026.3.22
- CVE-2026-35625OpenClaw < 2026.3.25 - Privilege Escalation via Silent Local Shared-Auth Reconnectnpm · openclaw
- CVE-2026-35624OpenClaw < 2026.3.22 - Policy Confusion via Room Name Collision in Nextcloud Talknpm · openclaw · fixed in 2026.3.22
- CVE-2026-35623OpenClaw < 2026.3.25 - Brute-Force Attack via Missing Webhook Password Rate Limitingnpm · openclaw
- CVE-2026-35622OpenClaw < 2026.3.22 - Improper Authentication Verification in Google Chat Webhooknpm · openclaw · fixed in 2026.3.22
- CVE-2026-35618OpenClaw < 2026.3.23 - Replay Identity Drift via Query-Only Variants in Plivo V2 Verificationnpm · openclaw · fixed in 2026.3.23
- CVE-2026-35617OpenClaw < 2026.3.25 - Authorization Bypass via Group Policy Rebinding with Mutable Space displayNamenpm · openclaw · fixed in 2026.3.28
- CVE-2026-34512OpenClaw < 2026.3.25 - Improper Access Control in /sessions/:sessionKey/kill Endpointnpm · openclaw
- CVE-2026-39315Unhead has a hasDangerousProtocol() bypass via leading-zero padded HTML entities in useHeadSafe()npm · unhead · fixed in 2.1.13
- CVE-2026-39983FTP Command Injection via CRLF in basic-ftpnpm · basic-ftp · fixed in 5.2.1
- CVE-2026-39974n8n-MCP has an Authenticated SSRF via instance-URL header in multi-tenant HTTP modenpm · n8n-mcp · fixed in 2.47.4
- CVE-2026-39943Directus exposes sensitive fields in revision historynpm · directus · fixed in 11.17.0
- CVE-2026-39942Directus has a Path Traversal and Broken Access Control in File Management APInpm · directus · fixed in 11.17.0
- CVE-2026-35041ReDoS in fast-jwt when using RegExp in allowed* leading to CPU exhaustion during token verificationnpm · fast-jwt · fixed in 6.2.1
- CVE-2026-35040fast-jwt: Stateful RegExp (/g or /y) causes non-deterministic allowed-claim validation (logical DoS)npm · fast-jwt · fixed in 6.2.1
- CVE-2025-62718Axios has a NO_PROXY Hostname Normalization Bypass that Leads to SSRFnpm · axios · fixed in 1.15.0, 0.31.0
- CVE-2026-5842decolua 9router Administrative API Endpoint api authorizationnpm · 9router · fixed in 0.3.75
- CVE-2026-5833awwaiid mcp-server-taskwarrior index.ts server.setRequestHandler command injectionnpm · mcp-server-taskwarrior
- CVE-2026-5832atototo api-lab-mcp HTTP http-server.ts test_http_endpoint server-side request forgerynpm · api-lab-mcp
- CVE-2026-5831Agions taskflow-ai terminal_execute handlers.ts os command injectionnpm · taskflow-ai · fixed in 2.1.9
- CVE-2026-40037OpenClaw < 2026.4.8 - Unsafe Request Body Replay via fetchWithSsrFGuard Cross-Origin Redirectsnpm · openclaw · fixed in 2026.4.8
- CVE-2026-39885FrontMCP Affected by SSRF via $ref Dereferencing in Untrusted OpenAPI Specificationsnpm · @frontmcp/adapters, @frontmcp/sdk +1 · fixed in 1.0.4, 2.3.0