npm vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2026-32897Lowopenclaw: OpenClaw reuses the gateway auth token in the owner ID prompt hashing fallback GHSA-659F-22XC-98F2Highopenclaw: OpenClaw hook transform path containment missed symlink-resolved escapes CVE-2026-32010Mediumopenclaw: In OpenClaw, manually adding sort to tools.exec.safeBins could bypass allowlist approval via --compress-program CVE-2026-32006Mediumopenclaw: OpenClaw has a BlueBubbles group allowlist mismatch via DM pairing-store fallback GHSA-GCJ7-R3HG-M7W6Lowopenclaw: OpenClaw's voice-call Twilio replay dedupe now bound to authenticated webhook identity GHSA-W7J5-J98M-W679Highopenclaw: OpenClaw has multiple E2E/test Dockerfiles that run all processes as root GHSA-796M-2973-WC5QMediumopenclaw: OpenClaw has exec allowlist/safeBins policy-runtime mismatch via env -S wrapper interpretation GHSA-7QF6-H84J-8FQ4Lowopenclaw: OpenClaw: Microsoft Teams media fetch paths bypass shared SSRF guard model CVE-2026-32025Mediumopenclaw: OpenClaw's browser-origin WebSocket auth hardening gap could enable loopback password brute-force chains CVE-2026-32029Mediumopenclaw: OpenClaw improperly parses X-Forwarded-For behind trusted proxies allows client IP spoofing in security decisions GHSA-7FF8-XJH3-MGH6Highopenclaw: OpenClaw's non-default autoAllowSkills setting could bypass on-miss exec prompt CVE-2026-32056Highopenclaw: OpenClaw's shell startup env injection bypasses system.run allowlist intent (RCE class)CVE-2026-27524Lowopenclaw: OpenClaw's runtime /debug override path accepted prototype-reserved keys CVE-2026-32033Mediumopenclaw: OpenClaw has a workspace-only sandbox guard mismatch for @-prefixed absolute paths GHSA-W9CG-V44M-4QV8Highopenclaw: OpenClaw affected by BASH_ENV / ENV startup-file injection into spawned shell commands GHSA-R294-2894-92J3Mediumopenclaw: OpenClaw has stored XSS in exported session HTML viewer via markdown/raw-HTML rendering GHSA-XMV6-R34M-62P4Highopenclaw: OpenClaw: Sandbox media fallback tmp symlink alias bypass allows host file reads outside sandboxRoot CVE-2026-32015Highopenclaw: OpenClaw's `tools.exec.safeBins` PATH-hijack allowed trojan binaries to bypass allowlist checks CVE-2026-32063Highopenclaw: OpenClaw Improperly Neutralizes Line Breaks in systemd Unit Generation Enables Local Command Execution (Linux)CVE-2026-32057Mediumopenclaw: OpenClaw has a Trusted-proxy Control UI pairing bypass which allows unpaired node sessions CVE-2026-22174Mediumopenclaw: OpenClaw Loopback CDP probe can leak Gateway token to local listener CVE-2026-22176Highopenclaw: OpenClaw has a Command Injection via unescaped environment assignments in Windows Scheduled Task script generation GHSA-4CQV-H74H-93J4Mediumopenclaw: OpenClaw has a Discord `allowFrom` slug-collision authorization bypass CVE-2026-32034Mediumopenclaw: OpenClaw has an opt-in insecure Control UI auth over plaintext HTTP could allow privileged access GHSA-H97F-6PQJ-Q452Mediumopenclaw: OpenClaw has a IPv6 multicast SSRF classifier bypass

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo