npm vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2026-32017Mediumopenclaw: OpenClaw exec allowlist safeBins short-option bypass could permit arbitrary file write GHSA-PFV7-RR5M-QMV6Mediumopenclaw: OpenClaw has auth inconsistency on local Browser Extension Relay /extension endpoint CVE-2026-32059Highopenclaw: OpenClaw's tools.exec.safeBins sort long-option abbreviation bypass can skip exec approval in allowlist mode CVE-2026-32021Mediumopenclaw: OpenClaw has a Feishu allowFrom authorization bypass via display-name collision CVE-2026-22179Highopenclaw: OpenClaw has macOS `system.run` allowlist bypass via quoted command substitution GHSA-5H2C-8V84-QPVRMediumopenclaw: OpenClaw shell-env fallback trusted startup env and could execute attacker-influenced login-shell paths GHSA-FF98-W8HJ-QRXFMediumopenclaw: OpenClaw plugin runtime command execution is part of trusted plugin boundary GHSA-553V-F69R-656JMediumopenclaw: OpenClaw unpaired device identity can bypass operator pairing and self-assign operator scopes with shared auth CVE-2026-32008Mediumopenclaw: OpenClaw browser navigation guard allowed non-network URL schemes, enabling authenticated browser-tool users to access file:// local files CVE-2026-31994Highopenclaw: OpenClaw Windows Scheduled Task script generation allowed local command injection via unsafe cmd argument handling CVE-2026-32007Highopenclaw: OpenClaw: Experimental apply_patch may bypass workspace-only checks in opt-in sandbox mounts (off by default)GHSA-J26J-7QC4-3MRFMediumopenclaw: OpenClaw: MS Teams fileConsent/invoke missing conversation binding allowed cross-conversation pending-upload consumption GHSA-2HM8-RQRM-XFJQMediumopenclaw: OpenClaw's owner-only gateway tool access checks were incomplete in specific authenticated DM flows CVE-2026-22217Mediumopenclaw: OpenClaw: shell-env trusted-prefix fallback allowed attacker-controlled binary execution via $SHELL CVE-2026-32896Mediumopenclaw: OpenClaw: BlueBubbles beta plugin webhook auth hardening (remove passwordless fallback)GHSA-2MC2-G238-722JMediumopenclaw: OpenClaw affected by iMessage remote attachment SCP hardening (strict host-key checks and remoteHost validation)CVE-2026-32009Highopenclaw: OpenClaw: safeBins static default trusted dirs allow writable-dir binary hijack (`jq`)GHSA-77HF-7FQF-F227Mediumopenclaw: OpenClaw skills-install-download: tar.bz2 extraction bypassed archive safety parity checks (local DoS)CVE-2026-32035Mediumopenclaw: OpenClaw: Discord voice transcript owner-flag omission could expose owner-only tools in mixed-trust channels GHSA-474H-PRJG-MMW3Highopenclaw: OpenClaw: Sandboxed sessions_spawn(runtime="acp") bypassed sandbox inheritance and allowed host ACP initialization CVE-2026-3484Mediummcp-nmap-server: MCP NMAP Server has an Injection vulnerability CVE-2026-32004Highopenclaw: OpenClaw has encoded-path auth bypass in plugin `/api/channels` route classification CVE-2026-32028Mediumopenclaw: OpenClaw: Discord DM reaction ingress missed dmPolicy/allowFrom checks in restricted setups CVE-2026-28483Highopenclaw: OpenClaw: ZIP extraction race could write outside destination via parent symlink rebind CVE-2026-22180Mediumopenclaw: OpenClaw: Unified root-bound write hardening for browser output and related path-boundary flows

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo