Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-45003OpenClaw < 2026.4.22 - Connector Endpoint Host Override via Workspace dotenv Filesnpm · openclaw · fixed in 2026.4.22
- CVE-2026-45002OpenClaw < 2026.4.20 - Hook Session-Key Bypass via Template Mappingnpm · openclaw · fixed in 2026.4.20
- CVE-2026-45001OpenClaw < 2026.4.20 - Gateway Config Mutation Guard Bypass via Agent Tool Accessnpm · openclaw · fixed in 2026.4.20
- CVE-2026-45000OpenClaw < 2026.4.20 - Server-Side Request Forgery via Browser CDP Profile Creationnpm · openclaw · fixed in 2026.4.20
- CVE-2026-44999OpenClaw < 2026.4.20 - Improper Trust Labeling in Isolated Cron Awareness Eventsnpm · openclaw · fixed in 2026.4.20
- CVE-2026-44998OpenClaw < 2026.4.20 - Tool Policy Bypass via Bundled MCP/LSP Toolsnpm · openclaw · fixed in 2026.4.20
- CVE-2026-44997OpenClaw < 2026.4.22 - Security Envelope Constraint Bypass in ACP Child Sessionsnpm · openclaw · fixed in 2026.4.22
- CVE-2026-44996OpenClaw < 2026.4.15 - Arbitrary Local File Read via Webchat Audio Embeddingnpm · openclaw · fixed in 2026.4.15
- CVE-2026-44995OpenClaw < 2026.4.20 - Arbitrary Code Execution via MCP stdio Environment Variablesnpm · openclaw · fixed in 2026.4.20
- CVE-2026-44994OpenClaw < 2026.4.22 - Authentication Bypass in Gateway Control UI Bootstrap Config Endpointnpm · openclaw · fixed in 2026.4.22
- CVE-2026-44993OpenClaw < 2026.4.20 - Direct Message Misclassification in Feishu Card Actionsnpm · openclaw · fixed in 2026.4.20
- CVE-2026-44992OpenClaw 2026.4.5 through 2026.4.19 - MiniMax API Host Override via Workspace dotenvnpm · openclaw · fixed in 2026.4.20
- CVE-2026-44991OpenClaw < 2026.4.21 - Authorization Bypass in Owner-Enforced Commands via Wildcard Channel Sendersnpm · openclaw · fixed in 2026.4.21
- CVE-2026-44226pyLoad: Unauthenticated traceback disclosure via global exception handler in WebUIPyPI · pyload-ng · fixed in 0.5.0b3.dev100
- CVE-2026-42315pyLoad: Path Traversal via Package Folder Name in set_package_dataPyPI · pyload-ng · fixed in 0.5.0b3.dev100
- CVE-2026-42314pyLoad: Path Traversal via Package Folder NamePyPI · pyload-ng · fixed in 0.5.0b3.dev100
- CVE-2026-42312pyload-ng: non-admin SETTINGS users can disable outbound TLS peer verificationPyPI · pyload-ng · fixed in 0.5.0b3.dev100
- CVE-2026-42313pyload-ng: non-admin SETTINGS users can redirect all outbound traffic through an attacker-controlled proxyPyPI · pyload-ng · fixed in 0.5.0b3.dev100
- CVE-2026-2393Server-Side Request Forgery (SSRF) in mlflow/mlflowPyPI · mlflow · fixed in 3.9.0
- CVE-2026-42349Clerk: Authorization bypass when combining organization, billing, or reverification checksnpm · @clerk/astro, @clerk/backend +15 · fixed in 2.17.11, 3.0.18, 2.33.3 and more
- CVE-2026-42843grav-plugin-api: Grav API Privilege Escalation to Super AdminPackagist · getgrav/grav-plugin-api · fixed in 1.0.0-beta.15
- CVE-2026-44737grav-plugin-admin: Stored Cross-Site Scripting (XSS) Reflected endpoint /admin/pages/[page], parameter data[header][title]Packagist · getgrav/grav · fixed in 1.7.49.5
- CVE-2026-44738Grav: Twig sandbox allows editor-role users to exfiltrate all plugin secrets via Config::toArray()Packagist · getgrav/grav · fixed in 2.0.0-rc.2
- CVE-2026-42845Grav: Anonymous Page Content Overwrite via Form File Upload filename OverridePackagist · getgrav/grav-plugin-form · fixed in 9.1.0
- CVE-2026-42842grav-plugin-form: XSS via Taxonomy Field Values in Admin PanelPackagist · getgrav/grav · fixed in 2.0.0-beta.2
- CVE-2026-42613Grav: Privilege Escalation via Missing Server-Side Validation of groups/accessPackagist · getgrav/grav · fixed in 2.0.0-beta.2
- CVE-2026-42612Grav: Publisher-Level Stored XSS via Unquoted Event AttributesPackagist · getgrav/grav · fixed in 2.0.0-beta.2
- CVE-2026-42611Grav: Stored XSS via Tag InjectionPackagist · getgrav/grav · fixed in 2.0.0-beta.2
- CVE-2026-6815CVE-2026-6815Go · github.com/casdoor/casdoor
- CVE-2026-42610Grav: Sensitive Information Disclosure via Accounts Service BypassPackagist · getgrav/grav · fixed in 2.0.0-beta.2