npm vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

GHSA-9F72-QCPW-2HXCHighopenclaw: OpenClaw: Native prompt image auto-load did not honor tools.fs.workspaceOnly in sandboxed runs CVE-2026-22169Mediumopenclaw: OpenClaw's non-default safeBins sort configuration can bypass intended allowlist approval constraints CVE-2026-32036Highopenclaw: OpenClaw has gateway plugin auth bypass via encoded dot-segment traversal in protected /api/channels paths CVE-2026-32045Mediumopenclaw: OpenClaw's gateway tokenless Tailscale auth applied to HTTP routes CVE-2026-22171Mediumopenclaw: OpenClaw vulnerable to path traversal in Feishu media temp-file naming allows writes outside os.tmpdir()CVE-2026-0540Mediumdompurify: DOMPurify contains a Cross-site Scripting vulnerability CVE-2025-15599Mediumdompurify: DOMPurify contains a Cross-site Scripting vulnerability CVE-2026-32040Lowopenclaw: OpenClaw Vulnerable to HTML injection via unvalidated image MIME type in data-URL interpolation CVE-2026-32026Mediumopenclaw: Temporary path handling could write outside OpenClaw temp boundary CVE-2026-32046Mediumopenclaw: OpenClaw: Chrome --no-sandbox disabled OS-level browser sandbox in sandbox browser container CVE-2026-32037Highopenclaw: OpenClaw's MSTeams attachment redirect handling could bypass configured media host allowlists CVE-2026-28393Highopenclaw: OpenClaw's hook transform module path allows traversal and arbitrary JavaScript module loading CVE-2026-32000Highopenclaw: OpenClaw has command injection via Windows shell fallback in Lobster tool execution GHSA-QJ22-XQJR-V83VHighopenclaw: OpenClaw's Telegram message_reaction authorization bypass allows unauthorized system-event injection CVE-2026-31992Mediumopenclaw: OpenClaw has allowlist exec-guard bypass via env -S CVE-2026-27601Highunderscore: Underscore has unlimited recursion in _.flatten and _.isEqual, potential for DoS attack CVE-2026-3455Lowmailparser: mailparser vulnerable to Cross-site Scripting CVE-2026-3449Low@tootallnate/once: @tootallnate/once vulnerable to Incorrect Control Flow Scoping CVE-2026-32016Mediumopenclaw: OpenClaw: macOS optional allowlist basename matching could bypass path-based policy CVE-2026-32003Highopenclaw: OpenClaw has system.run shell-wrapper env injection via SHELLOPTS/PS4 can bypass allowlist intent (RCE)CVE-2026-32014Highopenclaw: OpenClaw: Node reconnect metadata spoofing could bypass platform-based node command policy GHSA-6G25-PC82-VFWPMediumopenclaw: OpenClaw: macOS beta onboarding exposed PKCE verifier via OAuth state GHSA-5847-RM3G-23MWMediumopenclaw: OpenClaw has hook auth rate limiter bypass via IPv4-mapped IPv6 client key variants CVE-2026-32024Mediumopenclaw: OpenClaw's avatar symlink traversal can expose out-of-workspace local files CVE-2026-32038Mediumopenclaw: OpenClaw has a sandbox network isolation bypass via docker.network=container:<id>

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo