Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2026-35645OpenClaw < 2026.3.25 - Privilege Escalation via Synthetic operator.admin in deleteSessionnpm · openclaw · fixed in 2026.3.28
- CVE-2026-35644OpenClaw < 2026.3.22 - Credential Exposure via baseUrl Fields in Gateway Snapshotsnpm · openclaw · fixed in 2026.3.22
- CVE-2026-35642OpenClaw < 2026.3.25 - Authorization Bypass in Group Reactions via requireMention Bypassnpm · openclaw
- CVE-2026-35640OpenClaw < 2026.3.25 - Denial of Service via Unauthenticated Webhook Request Parsingnpm · openclaw · fixed in 2026.3.28
- CVE-2026-35639OpenClaw < 2026.3.22 - Privilege Escalation via device.pair.approve Scope Validationnpm · openclaw · fixed in 2026.3.22
- CVE-2026-35638OpenClaw < 2026.3.22 - Privilege Escalation via Self-Declared Scopes in Trusted-Proxy Control UInpm · openclaw · fixed in 2026.3.22
- CVE-2026-35637OpenClaw < 2026.3.22 - Premature Cite Expansion Before Authorization in Channel and DMnpm · openclaw · fixed in 2026.3.22
- CVE-2026-35636OpenClaw 2026.3.11 < 2026.3.25 - Session Isolation Bypass via sessionId Resolutionnpm · openclaw · fixed in 2026.3.28
- CVE-2026-35635OpenClaw < 2026.3.22 - Webhook Path Route Replacement Vulnerability in Synology Chatnpm · openclaw · fixed in 2026.3.22
- CVE-2026-35634OpenClaw < 2026.3.23 - Authentication Bypass via Local-Direct Requests in Canvas Gatewaynpm · openclaw · fixed in 2026.3.23
- CVE-2026-35633OpenClaw < 2026.3.22 - Unbounded Memory Allocation via Remote Media Error Responsesnpm · openclaw · fixed in 2026.3.22
- CVE-2026-35632OpenClaw < 2026.3.24 - Symlink Traversal via IDENTITY.md appendFile in agents.create/updatenpm · openclaw
- CVE-2026-35631OpenClaw < 2026.3.22 - Missing Authorization Enforcement in Internal ACP Chat Commandsnpm · openclaw · fixed in 2026.3.22
- CVE-2026-35629OpenClaw < 2026.3.25 - Server-Side Request Forgery via Unguarded Configured Base URLs in Channel Extensionsnpm · openclaw · fixed in 2026.3.28
- CVE-2026-35628OpenClaw < 2026.3.25 - Brute-Force Attack via Missing Telegram Webhook Rate Limitingnpm · openclaw
- CVE-2026-35627OpenClaw < 2026.3.22 - Unauthenticated Cryptographic Work in Nostr Inbound DM Handlingnpm · openclaw · fixed in 2026.3.22
- CVE-2026-35626OpenClaw < 2026.3.22 - Unauthenticated Resource Exhaustion via Voice Call Webhooknpm · openclaw · fixed in 2026.3.22
- CVE-2026-35625OpenClaw < 2026.3.25 - Privilege Escalation via Silent Local Shared-Auth Reconnectnpm · openclaw
- CVE-2026-35624OpenClaw < 2026.3.22 - Policy Confusion via Room Name Collision in Nextcloud Talknpm · openclaw · fixed in 2026.3.22
- CVE-2026-35623OpenClaw < 2026.3.25 - Brute-Force Attack via Missing Webhook Password Rate Limitingnpm · openclaw
- CVE-2026-35622OpenClaw < 2026.3.22 - Improper Authentication Verification in Google Chat Webhooknpm · openclaw · fixed in 2026.3.22
- CVE-2026-35618OpenClaw < 2026.3.23 - Replay Identity Drift via Query-Only Variants in Plivo V2 Verificationnpm · openclaw · fixed in 2026.3.23
- CVE-2026-35617OpenClaw < 2026.3.25 - Authorization Bypass via Group Policy Rebinding with Mutable Space displayNamenpm · openclaw · fixed in 2026.3.28
- CVE-2026-34512OpenClaw < 2026.3.25 - Improper Access Control in /sessions/:sessionKey/kill Endpointnpm · openclaw
- CVE-2026-40152PraisonAIAgents has a Path Traversal via Unvalidated Glob Pattern in list_files Bypasses Workspace BoundaryPyPI · praisonaiagents · fixed in 1.5.128
- CVE-2026-40150PraisonAIAgents has SSRF and Local File Read via Unvalidated URLs in web_crawl ToolPyPI · praisonaiagents · fixed in 1.5.128
- CVE-2026-40149PraisonAI has an Unauthenticated Allow-List Manipulation Bypasses Agent Tool Approval Safety ControlsPyPI · praisonai · fixed in 4.5.128
- CVE-2026-40148PraisonAI Affected by Decompression Bomb DoS via Recipe Bundle Extraction Without Size LimitsPyPI · praisonai · fixed in 4.5.128
- CVE-2026-40117PraisonAIAgents Affected by Arbitrary File Read via read_skill_file Missing Workspace Boundary and Approval GatePyPI · praisonaiagents · fixed in 1.5.128
- CVE-2026-40116PraisonAI's Unauthenticated WebSocket Endpoint Proxies to Paid OpenAI Realtime API Without Rate LimitsPyPI · praisonai · fixed in 4.5.128