Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-48782pydantic-ai: SSRF blocklist bypass via IPv4-compatible, SIIT/IVI, and local NAT64 IPv6 addresses (incomplete fix of CVE-2026-46678)PyPI · pydantic-ai, pydantic-ai-slim · fixed in 1.102.0, 2.0.0b3
- CVE-2026-48788Remark42: Cross-Site Scripting (XSS) on /api/v1/img via content-type spoofingGo · github.com/umputun/remark42 · fixed in 1.16.0
- CVE-2026-48779ws: Memory exhaustion DoS from tiny fragments and data chunksnpm · ws · fixed in 5.2.5, 6.2.4, 7.5.11 and more
- CVE-2026-48776LangGraph SDK has unsafe URL path constructionPyPI · langgraph, langgraph-sdk · fixed in 0.3.15
- CVE-2026-48777FileBrowser Quantum: Path Traversal in public share PATCH allows file ops outside shared directoryGo · github.com/gtsteffaniak/filebrowser/backend · fixed in 0.0.0-20260518193514-28e9b81e438e
- CVE-2026-53866OpenClaw < 2026.5.12 - Allowlist Bypass in Shell Inline-Command Parsingnpm · openclaw · fixed in 2026.5.12
- CVE-2026-53865OpenClaw < 2026.5.2 - Arbitrary Command Execution via Workspace-Derived Service PATHnpm · openclaw · fixed in 2026.5.2
- CVE-2026-53864OpenClaw < 2026.5.26 - Insufficient Environment Variable Sanitization in Node.js Control Variablesnpm · openclaw · fixed in 2026.5.26
- CVE-2026-53863OpenClaw < 2026.4.25 - Unvalidated Group ID Acceptance in Tool Group Policynpm · openclaw · fixed in 2026.4.25
- CVE-2026-53862OpenClaw < 2026.5.12 - Bootstrap Token Replay via Pending Pairing Scope Wideningnpm · openclaw · fixed in 2026.5.12
- CVE-2026-53861OpenClaw < 2026.5.6 - Allowlist Bypass via Combined POSIX Inline Flags on macOSnpm · openclaw · fixed in 2026.5.6
- CVE-2026-53860OpenClaw < 2026.5.7 - Sender Policy Bypass via Mutable Conversation Identifiers in BlueBubblesnpm · openclaw · fixed in 2026.5.7
- CVE-2026-53859OpenClaw < 2026.5.26 - Hostname Validation Bypass via Trailing-Dot Inconsistencynpm · openclaw · fixed in 2026.5.26
- CVE-2026-53858OpenClaw < 2026.5.2 - Arbitrary Runtime Dependency Loading via STATE_DIRECTORY Environment Variablenpm · openclaw · fixed in 2026.5.2
- CVE-2026-53857OpenClaw < 2026.5.3 - Mutable Display Name Binding in Zalo allowFrom Policynpm · openclaw · fixed in 2026.5.3
- CVE-2026-53856OpenClaw 2026.4.23 < 2026.4.24 - Insecure File Permissions in Config Recovery via OpenClaw.jsonnpm · openclaw · fixed in 2026.4.24
- CVE-2026-53855OpenClaw < 2026.4.2 - Shell Positional Parameters Bypass in Inline-Eval Checksnpm · openclaw · fixed in 2026.4.2
- CVE-2026-53854OpenClaw < 2026.4.25 - Privilege Escalation via ownerAllowFrom Wildcard Inheritance in Internal/Webchat Commandsnpm · openclaw · fixed in 2026.4.25
- CVE-2026-53853OpenClaw < 2026.5.12 - Argument Pattern Bypass in Exec Allowlist via Linux and macOSnpm · openclaw · fixed in 2026.5.12
- CVE-2026-53852OpenClaw < 2026.4.25 - Scope Bypass via Empty-Scope Device Re-pairingnpm · openclaw · fixed in 2026.4.25
- CVE-2026-53851OpenClaw < 2026.5.12 - Slack Reaction Event Notification Bypassnpm · openclaw · fixed in 2026.5.12
- CVE-2026-53850OpenClaw < 2026.4.25 - Control Scope Enforcement Bypass in Focus Commandnpm · openclaw · fixed in 2026.4.25
- CVE-2026-53849OpenClaw < 2026.5.7 - Privilege Escalation via Mutable Discord Display Names in allowFromnpm · openclaw · fixed in 2026.5.7
- CVE-2026-53848OpenClaw < 2026.5.26 - Exec Allowlist Bypass via Transparent Command Wrappersnpm · openclaw · fixed in 2026.5.26
- CVE-2026-53847OpenClaw < 2026.5.6 - Privilege Escalation via Active Memory Write Scopenpm · openclaw · fixed in 2026.5.6
- CVE-2026-53846OpenClaw < 2026.4.29 - Arbitrary Package Manager Execution via Workspace .env npm_execpathnpm · openclaw · fixed in 2026.4.29
- CVE-2026-53845OpenClaw < 2026.5.6 - Skill-Command Dispatch Hook Bypass via Before-Tool-Call Hook Skippingnpm · openclaw · fixed in 2026.5.6
- CVE-2026-53844OpenClaw < 2026.4.29 - Session Visibility Check Bypass in Shared Memory Searchnpm · openclaw · fixed in 2026.4.29
- CVE-2026-53843OpenClaw < 2026.5.26 - Node Token Revocation Bypass via Pairing-Scoped Device Sessionnpm · openclaw · fixed in 2026.5.26
- CVE-2026-53842OpenClaw < 2026.5.2 - Arbitrary Python Runtime Execution via CLOUDSDK_PYTHON Environment Variablenpm · openclaw · fixed in 2026.5.2