Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-41390OpenClaw < 2026.3.28 - Exec Allowlist Bypass via Unregistered /usr/bin/script Wrappernpm · openclaw · fixed in 2026.3.28
- CVE-2026-41388OpenClaw < 2026.3.31 - Configuration Rehydration via Empty-Array Revocation Handlingnpm · openclaw · fixed in 2026.3.31
- CVE-2026-41387OpenClaw < 2026.3.22 - Supply Chain Redirection via Incomplete Host Environment Sanitizationnpm · openclaw · fixed in 2026.3.22
- CVE-2026-41386OpenClaw < 2026.3.22 - Privilege Escalation via Unbound Bootstrap Setup Codesnpm · openclaw · fixed in 2026.3.22
- CVE-2026-41385OpenClaw < 2026.3.31 - Nostr Private Key Exposure via config.get Redaction Bypassnpm · openclaw · fixed in 2026.3.31
- CVE-2026-41384OpenClaw < 2026.3.24 - Environment Variable Injection via Workspace Config in CLI Backendnpm · openclaw · fixed in 2026.3.24
- CVE-2026-41383OpenClaw < 2026.4.2 - Arbitrary Remote Directory Deletion via Mis-scoped Mirror Mode Pathsnpm · openclaw · fixed in 2026.4.2
- CVE-2026-41382OpenClaw < 2026.3.31 - Discord Voice Ingress Authorization Bypass via Channel and Role Validation Gapsnpm · openclaw · fixed in 2026.3.31
- CVE-2026-41381OpenClaw < 2026.3.31 - Access Control Bypass in Discord Voice Manager via Channel Allowlistnpm · openclaw · fixed in 2026.3.31
- CVE-2026-41380OpenClaw < 2026.3.28 - Arbitrary Execution Allowlist via Wrapper Carrier Executablesnpm · openclaw · fixed in 2026.3.28
- CVE-2026-41379OpenClaw < 2026.3.28 - Privilege Escalation via chat.send to Admin-Class Talk Voice Confignpm · openclaw · fixed in 2026.3.28
- CVE-2026-41378OpenClaw < 2026.3.31 - Privilege Escalation to Remote Code Execution via Unrestricted node.event Agent Dispatchnpm · openclaw · fixed in 2026.3.31
- CVE-2026-41377OpenClaw < 2026.3.31 - Fail-Open Security Scan Bypass in Plugin Installationnpm · openclaw · fixed in 2026.3.31
- CVE-2026-41376OpenClaw < 2026.3.31 - Matrix Thread Context Allowlist Bypass via Sender Validationnpm · openclaw · fixed in 2026.3.31
- CVE-2026-41375OpenClaw < 2026.3.28 - Authorization Bypass in /phone arm and /phone disarm Endpointsnpm · openclaw · fixed in 2026.3.28
- CVE-2026-41374OpenClaw < 2026.3.31 - Resource Consumption via Discord Audio Preflight Before Member Authorizationnpm · openclaw · fixed in 2026.3.31
- CVE-2026-41373OpenClaw < 2026.3.31 - Compiler Binary Substitution via Environment Variable Override in Host Execution Policynpm · openclaw · fixed in 2026.3.31
- CVE-2026-24178NVIDIA NVFlare Dashboard contains a vulnerability in the user management and authentication system where an unauthenticated attacker may cauPyPI · nvflare · fixed in 2.7.2
- CVE-2026-40969Spring gRPC AuthenticationException message reflected to remote clientMaven · org.springframework.grpc:spring-grpc · fixed in 1.0.3
- CVE-2026-40968Spring gRPC SecurityContext leaks across requests on authorization failureMaven · org.springframework.grpc:spring-grpc · fixed in 1.0.3
- CVE-2026-41636Apache Thrift: Node.js skip() recursionnpm · thrift · fixed in 0.23.0
- CVE-2026-41602Apache Thrift: Go TFramedTransport uint32 overflowGo · github.com/apache/thrift · fixed in 0.23.0
- CVE-2026-40980In Spring AI, a malicious PDF file can be crafted that triggers the allocation of unreasonable amounts of memory when handled by `ForkPDFLayMaven · org.springframework.ai:spring-ai-pdf-document-reader · fixed in 1.0.6, 1.1.5
- CVE-2026-40979In Spring AI, having access to a shared environment can expose the ONNX model used by the application.Maven · org.springframework.ai:spring-ai-transformers · fixed in 1.0.6, 1.1.5
- CVE-2026-40978SQL injection vulnerability in Spring AI's `CosmosDBVectorStore` allows attackers to execute arbitrary SQL queries via crafted document IDs.Maven · org.springframework.ai:spring-ai-azure-cosmos-db-store · fixed in 1.0.6, 1.1.5
- CVE-2026-40966VectorStoreChatMemoryAdvisor conversation scoping can lead to cross-tenant memory exfiltrationMaven · org.springframework.ai:spring-ai-advisors-vector-store · fixed in 1.0.6, 1.1.5
- CVE-2026-40967In Spring AI, various FilterExpressionConverter implementations accept a filter expression object and translate them to specific vector storMaven · org.springframework.ai:spring-ai-vector-store · fixed in 1.0.6, 1.1.5
- CVE-2026-42510OpenStack Ironic before 35.0.1 allows ipmitool execution in a non-default configuration that has a console interface.PyPI · ironic · fixed in 35.0.1
- CVE-2026-7223BigSweetPotatoStudio HyperChat AI Proxy Middleware aiProxyMiddleware.mts fetch server-side request forgerynpm · @dadigua/hyperchat
- CVE-2026-7212edvardlindelof notes-mcp notes_mcp.py path traversalPyPI · notes-mcp