Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-43531OpenClaw < 2026.4.9 - Environment Variable Injection via Workspace .env Filenpm · openclaw · fixed in 2026.4.9
- CVE-2026-43530OpenClaw 2026.2.23 < 2026.4.12 - Weakened Exec Approval Binding via busybox and toybox Applet Executionnpm · openclaw · fixed in 2026.4.12
- CVE-2026-43529OpenClaw < 2026.4.10 - Time-of-Check-Time-of-Use (TOCTOU) Race Condition in exec Script Preflight Validatornpm · openclaw · fixed in 2026.4.10
- CVE-2026-43528OpenClaw < 2026.4.14 - Redaction Bypass via sourceConfig and runtimeConfig Aliasesnpm · openclaw · fixed in 2026.4.14
- CVE-2026-43527OpenClaw < 2026.4.14 - Server-Side Request Forgery via Private Network Navigationnpm · openclaw · fixed in 2026.4.14
- CVE-2026-43526OpenClaw < 2026.4.12 - Server-Side Request Forgery via QQBot Reply Media URL Handlingnpm · openclaw · fixed in 2026.4.12
- CVE-2026-42439OpenClaw < 2026.4.10 - SSRF Policy Bypass in Browser Tabs Action Routesnpm · openclaw · fixed in 2026.4.10
- CVE-2026-42438OpenClaw 2026.4.9 < 2026.4.10 - Sender Policy Bypass in Host Media Attachment Readsnpm · openclaw · fixed in 2026.4.10
- CVE-2026-42437OpenClaw 2026.4.9 < 2026.4.10 - Denial of Service via Oversized WebSocket Frames in Voice-call Realtime Pathnpm · openclaw · fixed in 2026.4.10
- CVE-2026-42436OpenClaw < 2026.4.14 - Internal Page Content Exposure via Browser Snapshot and Screenshot Routesnpm · openclaw · fixed in 2026.4.14
- CVE-2026-42435OpenClaw 2026.2.22 < 2026.4.12 - Shell-Wrapper Detection Bypass via Environment Variable Assignment Injectionnpm · openclaw · fixed in 2026.4.12
- CVE-2026-42434OpenClaw 2026.4.5 < 2026.4.10 - Sandbox Escape via host Parameter Override in Exec Routingnpm · openclaw · fixed in 2026.4.10
- CVE-2026-42433OpenClaw < 2026.4.10 - Unauthorized Matrix Profile Config Persistence Access via operator.write Message Toolsnpm · openclaw · fixed in 2026.4.10
- CVE-2026-6322fast-uri vulnerable to host confusion via percent-encoded authority delimitersnpm · fast-uri · fixed in 3.1.2, 2.4.1
- CVE-2026-43868Apache Thrift: Rust implementation vulnerable to CVE-2020-13949 patterncrates.io · thrift · fixed in 0.23.0
- CVE-2026-43870Apache Thrift: Node.js web_server.js multi-vulnerabilitynpm · thrift
- CVE-2026-43869Apache Thrift: TSSLTransportFactory.java hostname verificationMaven · org.apache.thrift:libthrift · fixed in 0.23.0
- CVE-2026-42997An issue was discovered in idrac in OpenStack Ironic before 35.0.1.PyPI · ironic-python-agent · fixed in 35.0.1, 32.0.1, 29.0.5 and more
- CVE-2026-43002An issue was discovered in OpenStack Horizon 25.6 and 25.7 before 25.7.3.PyPI · horizon · fixed in 25.7.3
- CVE-2026-7776Boundary Workers Vulnerable to Denial of Service During TLS HandshakeGo · github.com/hashicorp/boundary · fixed in 0.19.5, 0.20.3, 0.21.3
- CVE-2026-42238Unauthenticated Remote Code Execution via Backup Restore in nginx-uiGo · github.com/0xjacky/nginx-ui · fixed in 2.3.8
- CVE-2026-42223nginx-ui: Settings API Exposes Protected SecretsGo · github.com/0xjacky/nginx-ui · fixed in 2.3.8
- CVE-2026-42222nginx-ui: Unauthenticated first-boot instance claim via POST /api/install allows remote bootstrap takeoverGo · github.com/0xjacky/nginx-ui
- CVE-2026-42221nginx-ui: Unauthenticated First-Run Installer Allows Remote Initial Admin ClaimGo · github.com/0xjacky/nginx-ui · fixed in 2.3.8
- CVE-2026-42220nginx-ui: Authenticated settings disclosure exposes node.secret and enables trusted-node authentication abuse, backup exfiltration, and restore-based nginx-ui state rollbackGo · github.com/0xjacky/nginx-ui
- CVE-2026-6321fast-uri vulnerable to path traversal via percent-encoded dot segmentsnpm · fast-uri · fixed in 3.1.1, 2.4.1
- CVE-2026-7768@fastify/accepts-serializer vulnerable to Denial of Service via Unbounded Accept Header Cache Growthnpm · @fastify/accepts-serializer · fixed in 6.0.4
- CVE-2026-41686Claude SDK for TypeScript has Insecure Default File Permissions in Local Filesystem Memory Toolnpm · @anthropic-ai/sdk · fixed in 0.91.1
- CVE-2026-42237n8n: SQL Injection in Snowflake and MySQL Nodesnpm · n8n · fixed in 1.123.32, 2.18.1, 2.17.4
- CVE-2026-42236n8n: Unauthenticated Denial of Service via MCP Client Registrationnpm · n8n · fixed in 1.123.32, 2.18.1, 2.17.4