Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-28451OpenClaw < 2026.2.14 - SSRF via Feishu Extension Media Fetchingnpm · openclaw · fixed in 2026.2.14
- CVE-2026-28450OpenClaw < 2026.2.12 - Unauthenticated Profile Tampering via Nostr Plugin HTTP Endpointsnpm · openclaw · fixed in 2026.2.12
- CVE-2026-28448OpenClaw 2026.1.29 < 2026.2.1 - Authorization Bypass in Twitch Plugin allowFrom Access Controlnpm · openclaw · fixed in 2026.2.1
- CVE-2026-28447OpenClaw 2026.1.29-beta.1 < 2026.2.1 - Path Traversal in Plugin Installation via Package Namenpm · openclaw · fixed in 2026.2.1
- CVE-2026-28446OpenClaw < 2026.2.1 - Inbound Allowlist Policy Bypass in voice-call Extension via Empty Caller ID and Suffix Matchingnpm · openclaw · fixed in 2026.2.2
- CVE-2026-28395OpenClaw 2026.1.14-1 < 2026.2.12 - Unintended Public Binding of Chrome Extension Relay via Wildcard cdpUrlnpm · openclaw · fixed in 2026.2.12
- CVE-2026-28394OpenClaw < 2026.2.15 - Denial of Service via Unbounded Response Parsing in web_fetch Toolnpm · openclaw · fixed in 2026.2.15
- CVE-2026-28393OpenClaw 2.0.0-beta3 < 2026.2.14 - Arbitrary JavaScript Module Loading via Hook Transform Path Traversalnpm · openclaw · fixed in 2026.2.14
- CVE-2026-28392OpenClaw < 2026.2.14 - Privilege Escalation in Slack Slash Command Handler via Direct Messagesnpm · openclaw · fixed in 2026.2.14
- CVE-2026-28391OpenClaw < 2026.2.2 - Command Injection via cmd.exe Parsing Bypass in Allowlist Enforcementnpm · openclaw · fixed in 2026.2.2
- CVE-2026-28343CKEditor: Cross-site scripting (XSS) in the HTML Support packagenpm · @ckeditor/ckeditor5-html-support, ckeditor5 · fixed in 47.6.0
- CVE-2025-64166Mercurius: Incorrect Content-Type parsing can lead to CSRF attacknpm · mercurius · fixed in 16.4.0
- CVE-2026-29053Ghost Vulnerable to Remote Code Execution via Malicious Themesnpm · ghost · fixed in 6.19.1
- CVE-2024-43035Fonoster 0.5.5 before 0.6.1 allows ../ directory traversal to read arbitrary files via the /sounds/:file or /tts/:file VoiceServer endpoint.npm · @fonoster/voice · fixed in 0.6.1
- CVE-2025-70948A host header injection vulnerability in the mailer component of @perfood/couch-auth v0.26.0 allows attackers to obtain reset tokens and exenpm · @perfood/couch-auth
- CVE-2025-70949An observable timing discrepancy in @perfood/couch-auth v0.26.0 allows attackers to access sensitive information via a timing side-channel.npm · @perfood/couch-auth
- CVE-2026-29085Hono: SSE Control Field Injection via CR/LF in writeSSE()npm · hono · fixed in 4.12.4
- CVE-2026-29045Hono: Arbitrary file access via serveStatic vulnerabilitynpm · hono · fixed in 4.12.4
- CVE-2026-29086Hono: Cookie Attribute Injection via Unsanitized domain and path in setCookie()npm · hono · fixed in 4.12.4
- CVE-2025-68467Dark Reader gives users the ability to request style sheets from local web serversnpm · darkreader · fixed in 4.9.117
- CVE-2026-3125SSRF vulnerability in opennextjs-cloudflare via /cdn-cgi/ path normalization bypassnpm · @opennextjs/cloudflare · fixed in 1.17.1, 1.3.0
- CVE-2026-3520Multer vulnerable to Denial of Service via uncontrolled recursionnpm · multer · fixed in 2.1.1
- CVE-2026-27971Qwik affected by unauthenticated RCE via server$ Deserializationnpm · @builder.io/qwik · fixed in 1.19.1
- CVE-2026-27601Underscore.js has unlimited recursion in _.flatten and _.isEqual, potential for DoS attacknpm · underscore · fixed in 1.13.8
- CVE-2026-3484PhialsBasement nmap-mcp-server Nmap CLI index.ts child_process.exec command injectionnpm · mcp-nmap-server
- CVE-2026-0540DOMPurify XSS via Missing Rawtext Elements in SAFE_FOR_XMLnpm · dompurify · fixed in 3.3.2, 2.5.9
- CVE-2025-15599DOMPurify XSS via Textarea Rawtext Bypass in SAFE_FOR_XMLnpm · dompurify · fixed in 3.2.7
- CVE-2026-3455Versions of the package mailparser before 3.9.3 are vulnerable to Cross-site Scripting (XSS) via the textToHtml() function due to the impropnpm · mailparser · fixed in 3.9.3
- CVE-2026-3449Versions of the package @tootallnate/once before 3.0.1 are vulnerable to Incorrect Control Flow Scoping in promise resolving when AbortSignanpm · @tootallnate/once · fixed in 3.0.1, 2.0.1
- CVE-2026-28401NocoDB: Stored Cross-Site Scripting via Rich Text Cellsnpm · nocodb · fixed in 0.301.3