Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-33576OpenClaw < 2026.3.28 - Unauthorized Media Download via Zalo Channelnpm · openclaw · fixed in 2026.3.28
- CVE-2026-34210mppx has Stripe charge credential replay via missing idempotency checknpm · mppx · fixed in 0.4.11
- CVE-2026-34156NocoBase Affected by Sandbox Escape to RCE via console._stdout Prototype Chain Traversal in Workflow Script Nodenpm · @nocobase/plugin-workflow-javascript · fixed in 2.0.28
- CVE-2026-34506OpenClaw < 2026.3.8 - Sender Allowlist Bypass in Microsoft Teams Plugin via Route Allowlist Configurationnpm · openclaw · fixed in 2026.3.8
- CVE-2026-34505OpenClaw < 2026.3.12 - Webhook Rate Limiting Bypass via Pre-Authentication Secret Validationnpm · openclaw · fixed in 2026.3.12
- CVE-2026-32988OpenClaw < 2026.3.11 - Sandbox Boundary Bypass via Unvalidated Temporary File Creationnpm · openclaw · fixed in 2026.3.11
- CVE-2026-32982OpenClaw < 2026.3.13 - Telegram Bot Token Exposure in Media Fetch Error Logsnpm · openclaw · fixed in 2026.3.13
- CVE-2026-32977OpenClaw < 2026.3.11 - Sandbox Boundary Bypass via Unanchored writeFile Commit Pathnpm · openclaw · fixed in 2026.3.11
- CVE-2026-32976OpenClaw < 2026.3.11 - Account-Scoped configWrites Policy Bypass via Channel Commandsnpm · openclaw · fixed in 2026.3.11
- CVE-2026-32971OpenClaw < 2026.3.11 - Node-Host Approval UI Mismatch Allows Execution of Unintended Commandsnpm · openclaw · fixed in 2026.3.11
- CVE-2026-32970OpenClaw < 2026.3.11 - Credential Fallback Logic Bypass via Unavailable Local Auth SecretRefsnpm · openclaw · fixed in 2026.3.11
- CVE-2026-32921OpenClaw < 2026.3.8 - Script Content Modification via Mutable Operand Binding in system.runnpm · openclaw · fixed in 2026.3.8
- CVE-2026-32920OpenClaw < 2026.3.12 - Arbitrary Code Execution via Auto-Discovery of Workspace Pluginsnpm · openclaw · fixed in 2026.3.12
- CVE-2026-32917OpenClaw < 2026.3.13 - Remote Command Injection via Unsanitized iMessage Attachment Paths in SCPnpm · openclaw · fixed in 2026.3.13
- CVE-2026-32916OpenClaw 2026.3.7 < 2026.3.11 - Authorization Bypass in Plugin Subagent Routes via Synthetic Admin Scopesnpm · openclaw · fixed in 2026.3.11
- CVE-2026-34043Serialize JavaScript has CPU Exhaustion Denial of Service via crafted array-like objectsnpm · serialize-javascript · fixed in 7.0.5
- CVE-2026-33575OpenClaw < 2026.3.12 - Long-lived Credential Exposure in Pairing Setup Codesnpm · openclaw · fixed in 2026.3.12
- CVE-2026-33574OpenClaw < 2026.3.8 - Path Traversal via Tools Root Rebinding in Skills Downloadnpm · openclaw · fixed in 2026.3.8
- CVE-2026-33573OpenClaw < 2026.3.11 - Workspace Boundary Bypass via Agent RPC Parametersnpm · openclaw · fixed in 2026.3.11
- CVE-2026-33572OpenClaw < 2026.2.17 - Insufficient File Permissions in Session Transcript Filesnpm · openclaw · fixed in 2026.2.17
- CVE-2026-32987OpenClaw < 2026.3.13 - Bootstrap Setup Code Replay via Device Pairingnpm · openclaw · fixed in 2026.3.13
- CVE-2026-32980OpenClaw < 2026.3.13 - Resource Exhaustion via Unauthenticated Telegram Webhook Requestnpm · openclaw · fixed in 2026.3.13
- CVE-2026-32979OpenClaw < 2026.3.11 - Unbound Interpreter and Runtime Commands Bypass in node-host Approvalnpm · openclaw · fixed in 2026.3.11
- CVE-2026-32978OpenClaw < 2026.3.11 - Approval Bypass via Unrecognized Script Runnersnpm · openclaw · fixed in 2026.3.11
- CVE-2026-32975OpenClaw < 2026.3.12 - Weak Authorization via Mutable Group Names in Zalouser Allowlistnpm · openclaw · fixed in 2026.3.12
- CVE-2026-32974OpenClaw < 2026.3.12 - Forged Event Injection via Feishu Webhook Verification Tokennpm · openclaw · fixed in 2026.3.12
- CVE-2026-32973OpenClaw < 2026.3.11 - Exec Allowlist Pattern Overmatch via POSIX Path Normalizationnpm · openclaw · fixed in 2026.3.11
- CVE-2026-32972OpenClaw < 2026.3.11 - Authorization Bypass in Browser Profile Management via browser.requestnpm · openclaw · fixed in 2026.3.11
- CVE-2026-32924OpenClaw < 2026.3.12 - Authorization Bypass via Misclassified Reaction Events in Feishunpm · openclaw · fixed in 2026.3.12
- CVE-2026-32923OpenClaw < 2026.3.11 - Authorization Bypass in Discord Guild Reaction Allowlist Enforcementnpm · openclaw · fixed in 2026.3.11