npm vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2026-26329Highopenclaw: OpenClaw has a path traversal in browser upload allows local file read CVE-2026-26328Mediumopenclaw: OpenClaw iMessage group allowlist authorization inherited DM pairing-store identities CVE-2026-26327Highopenclaw: OpenClaw allows unauthenticated discovery TXT records to steer routing and TLS pinning GHSA-CHM2-M3W2-WCXMLowopenclaw: OpenClaw Google Chat spoofing access with allowlist authorized mutable email principal despite sender-ID mismatch CVE-2026-26326Mediumopenclaw: OpenClaw skills.status could leak secrets to operator.read clients CVE-2026-26325Highopenclaw: OpenClaw Node host system.run rawCommand/command mismatch can bypass allowlist/approvals CVE-2026-26324Highopenclaw: OpenClaw has a SSRF guard bypass via full-form IPv4-mapped IPv6 (loopback / metadata reachable)CVE-2026-26322Highopenclaw: OpenClaw Gateway tool allowed unrestricted gatewayUrl override CVE-2026-26321Highopenclaw: OpenClaw has a local file disclosure via sendMediaFeishu in Feishu extension CVE-2026-26320Highopenclaw: OpenClaw macOS deep link confirmation truncation can conceal executed agent message CVE-2026-26319Highopenclaw: OpenClaw is Missing Webhook Authentication in Telnyx Provider Allows Unauthenticated Requests CVE-2026-28447Highopenclaw: OpenClaw has a Path Traversal in Plugin Installation CVE-2026-28473Highopenclaw: OpenClaw authorization bypass: operator.write can resolve exec approvals via chat.send -> /approve CVE-2026-28481Mediumopenclaw: OpenClaw MS Teams inbound attachment downloader leaks bearer tokens to allowlisted suffix domains CVE-2026-28448Highopenclaw: OpenClaw Twitch allowFrom is not enforced in optional plugin, unauthorized chat users can trigger agent pipeline CVE-2026-28446Criticalopenclaw: OpenClaw has an inbound allowlist policy bypass in voice-call extension (empty caller ID + suffix matching)CVE-2026-28474Critical@openclaw/nextcloud-talk: Nextcloud Talk allowlist bypass via actor.name display name spoofing CVE-2026-28454Criticalopenclaw: OpenClaw has a potential access-group authorization bypass if channel type lookup fails CVE-2026-28471Mediumopenclaw: OpenClaw has a Matrix allowlist bypass via displayName and cross-homeserver localpart matching CVE-2026-26316Highopenclaw: OpenClaw BlueBubbles webhook auth bypass via loopback proxy trust CVE-2026-28465High@openclaw/voice-call: OpenClaw optional voice-call plugin: webhook verification may be bypassed behind certain proxy configurations GHSA-G27F-9QJV-22PMLowopenclaw: OpenClaw log poisoning (indirect prompt injection) via WebSocket headers CVE-2026-28450Mediumopenclaw: OpenClaw's unauthenticated Nostr profile HTTP endpoints allow remote profile/config tampering CVE-2026-28467Mediumopenclaw: OpenClaw affected by SSRF via attachment/media URL hydration CVE-2026-26278Highfast-xml-parser: fast-xml-parser affected by DoS through entity expansion in DOCTYPE (no expansion limit)

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo