Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-32057OpenClaw < 2026.2.25 - Authentication Bypass via Control UI client.id Parameternpm · openclaw · fixed in 2026.2.25
- CVE-2026-32056OpenClaw < 2026.2.22 - Remote Code Execution via Shell Startup Environment Variable Injection in system.runnpm · openclaw · fixed in 2026.2.22
- CVE-2026-32055OpenClaw < 2026.2.26 - Workspace Path Boundary Bypass via Non-existent Symlinknpm · openclaw · fixed in 2026.2.26
- CVE-2026-32054OpenClaw < 2026.2.25 - Symlink Traversal in Browser Trace/Download Path Handlingnpm · openclaw · fixed in 2026.2.25
- CVE-2026-32053OpenClaw < 2026.2.23 - Twilio Webhook Replay Bypass via Randomized Event ID Normalizationnpm · openclaw · fixed in 2026.2.23
- CVE-2026-32052OpenClaw < 2026.2.24 - Hidden Command Execution via Shell-Wrapper Positional argv Carriersnpm · openclaw · fixed in 2026.2.24
- CVE-2026-32051OpenClaw < 2026.3.1 - Authorization Bypass in Agent Runs via Owner-Only Tool Accessnpm · openclaw · fixed in 2026.3.1
- CVE-2026-32050OpenClaw < 2026.2.25 - Unauthorized Reaction Status Event Enqueue via Access Check Bypassnpm · openclaw · fixed in 2026.2.25
- CVE-2026-32049OpenClaw < 2026.2.22 - Denial of Service via Inbound Media Download Byte Limit Bypassnpm · openclaw · fixed in 2026.2.22
- CVE-2026-32048OpenClaw < 2026.3.1 - Sandbox Escape via Cross-Agent sessions_spawnnpm · openclaw · fixed in 2026.3.1
- CVE-2026-32046OpenClaw < 2026.2.21 - OS-level Sandbox Bypass via --no-sandbox Flagnpm · openclaw · fixed in 2026.2.21
- CVE-2026-32045OpenClaw < 2026.2.21 - Authentication Bypass in HTTP Gateway Routes via Tokenless Tailscale Authnpm · openclaw · fixed in 2026.2.21
- CVE-2026-32044OpenClaw < 2026.3.2 - Tar Archive Safety Bypass in Skills Installationnpm · openclaw · fixed in 2026.3.2
- CVE-2026-32043OpenClaw < 2026.2.25 - Time-of-Check-Time-of-Use via Mutable Symlink in system.run cwd Parameternpm · openclaw · fixed in 2026.2.25
- CVE-2026-32042OpenClaw < 2026.2.25 - Privilege Escalation via Unpaired Device Identity in Shared Gateway Authenticationnpm · openclaw · fixed in 2026.2.25
- CVE-2026-33228flatted: Prototype Pollution via parse()npm · flatted · fixed in 3.4.2
- CVE-2026-33226Budibase Unrestricted Server-Side Request Forgery (SSRF) via REST Datasource Query Previewnpm · budibase
- CVE-2026-32887Effect Bug: `AsyncLocalStorage` context lost/contaminated inside Effect fibers under concurrent load with RPCnpm · effect · fixed in 3.20.0
- CVE-2026-33151socket.io allows an unbounded number of binary attachmentsnpm · socket.io-parser · fixed in 3.3.5, 3.4.4, 4.2.6
- CVE-2026-33142OneUptime: ClickHouse SQL Injection via unvalidated column identifiers in sort, select, and groupBy parametersnpm · oneuptime · fixed in 10.0.34
- CVE-2026-33143OneUptime: WhatsApp Webhook Missing Signature Verificationnpm · oneuptime · fixed in 10.0.34
- CVE-2026-22172OpenClaw < 2026.3.12 - Scope Elevation in WebSocket Shared-Auth Connectionsnpm · openclaw · fixed in 2026.3.12
- CVE-2026-33131h3 has a middleware bypass with one gadgetnpm · h3 · fixed in 2.0.1-rc.15
- CVE-2026-33129h3 has an observable timing discrepancy in basic auth utilsnpm · h3 · fixed in 2.0.1-rc.9
- CVE-2026-33128h3 has a Server-Sent Events Injection via Unsanitized Newlines in Event Stream Fieldsnpm · h3 · fixed in 2.0.1-rc.15, 1.15.6
- CVE-2026-32701Qwik has array method pollution in FormData processing, allowing type confusion and DoSnpm · @builder.io/qwik-city · fixed in 1.19.2
- CVE-2026-33068Claude Code has a Workspace Trust Dialog Bypass via Repo-Controlled Settings Filenpm · @anthropic-ai/claude-code · fixed in 2.1.53
- CVE-2026-33060CKAN MCP Server: SSRF via base_url allows access to internal networksnpm · @aborruso/ckan-mcp-server · fixed in 0.4.85
- CVE-2026-33036fast-xml-parser affected by numeric entity expansion bypassing all entity expansion limits (incomplete fix for CVE-2026-26278)npm · fast-xml-parser · fixed in 5.5.6, 4.5.5
- CVE-2026-33011Nest Fastify HEAD Request Middleware Bypassnpm · @nestjs/platform-fastify · fixed in 11.1.16