npm vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

GHSA-3JX4-Q2M7-R496Highopenclaw: OpenClaw: Hardlink alias checks could bypass workspace-only file boundaries in specific configurations GHSA-VVJH-F6P9-5VCFHighopenclaw: OpenClaw Canvas Authentication Bypass Vulnerability CVE-2026-32002Mediumopenclaw: OpenClaw's image tool bypasses tools.fs.workspaceOnly on sandbox mount paths and exfiltrates out-of-workspace images CVE-2026-32019Mediumopenclaw: OpenClaw has incomplete IPv4 special-use SSRF blocking in web fetch guard GHSA-9MPH-4F7V-FMVHMediumopenclaw: OpenClaw has agent avatar symlink traversal in gateway session metadata GHSA-F6H3-846H-2R8WMediumopenclaw: OpenClaw's elevated allowFrom accepted broader identity signals than specified within sender-scoped authorization CVE-2026-32067Lowopenclaw: OpenClaw has cross-account DM pairing authorization bypass via unscoped pairing store access GHSA-8CP7-RP8R-MG77Mediumopenclaw: OpenClaw has SSRF guard bypass via IPv6 transition over ISATAP CVE-2026-32005Highopenclaw: OpenClaw: Slack interactive callbacks could skip configured sender checks in some shared-workspace flows CVE-2026-28343Medium@ckeditor/ckeditor5-html-support: CKEditor 5 has Cross-site Scripting (XSS) in the HTML Support package CVE-2025-68467Lowdarkreader: Dark Reader gives users the ability to request style sheets from local web servers CVE-2026-32018Mediumopenclaw: OpenClaw's serialize sandbox registry writes to prevent races and delete-rollback corruption CVE-2026-32001Mediumopenclaw: OpenClaw's Node role device-identity bypass allows unauthorized node.event injection GHSA-2CH6-X3G4-7759Highopenclaw: OpenClaw's commands.allowFrom sender authorization accepted conversation identifiers via ctx.From CVE-2026-31995Mediumopenclaw: OpenClaw has Windows Lobster shell fallback command injection in constrained fallback path GHSA-534W-2VM4-89XRMediumopenclaw: OpenClaw's Zalo group sender allowlist bypass permits unauthorized GROUP dispatch GHSA-CJV3-M589-V3RXMediumopenclaw: OpenClaw has Canvas route hardening for mixed-trust deployments CVE-2026-27566Highopenclaw: OpenClaw's exec allowlist wrapper analysis did not unwrap env/shell dispatch chains CVE-2026-32039Mediumopenclaw: OpenClaw's typed sender-key matching for toolsBySender prevents identity-collision policy bypass CVE-2026-32050Mediumopenclaw: OpenClaw's Signal reaction-only status events could, in limited cases, be enqueued before access checks CVE-2026-27523Highopenclaw: OpenClaw's sandbox bind validation could bypass allowed-root and blocked-path checks via symlink-parent missing-leaf paths GHSA-JXRQ-8FM4-9P58Highopenclaw: OpenClaw: Zip extraction symlink traversal could write outside destination CVE-2026-28449Mediumopenclaw: OpenClaw's Nextcloud Talk webhook replay could trigger duplicate inbound processing GHSA-8MF7-VV8W-HJR2Lowopenclaw: OpenClaw's tools.exec.safeBins generic fallback allowed interpreter-style inline payload execution in allowlist mode CVE-2026-31998Mediumopenclaw: OpenClaw's Synology Chat dmPolicy=allowlist failed open on empty allowedUserIds, allowing unauthorized agent dispatch

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo