npm vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2026-53848Lowopenclaw: OpenClaw: Exec allowlist could miss side effects from transparent command wrappersCVE-2026-46580High@theia/ai-chat-ui: [Eclipse Theia] Indirect Prompt Injection via Auto-Loaded Workspace Prompt Template Files in AI ChatCVE-2026-44691High@theia/debug: [Eclipse Theia] Arbitrary Command Execution via Untrusted Workspace Task DefinitionsCVE-2026-44688High@theia/ai-chat-ui: [Eclipse Theia] Indirect Prompt Injection via Adversarial Workspace File and Directory Names in AI ChatCVE-2026-22551Medium@theia/ai-chat-ui: [Eclipse Theia] Data Exfiltration via Markdown Image Rendering in AI ChatGHSA-QQF5-X7MJ-V43PHighbudibase: budibase: Database Connector SQL Injections in PostgreSQL, MS SQL, and MySQLCVE-2026-58399Critical@acastellon/auth: @acastellon/auth: Authentication bypass via spoofable headers in validateToken()CVE-2026-57495High@agenticmail/core: AgenticMail: Unauthenticated inbound mail triggers bypassPermissions resume of the operator's Claude Code session (bridge-wake)CVE-2026-57494High@agenticmail/api: AgenticMail: Cross-agent task authorization bypass in AgenticMail APICVE-2026-53861Mediumopenclaw: OpenClaw: macOS Swift exec allowlist missed combined POSIX inline flagsCVE-2026-57441Medium@bitbonsai/mcpvault: MCPVault: PathFilter restricted-directory deny-list bypass via case and trailing dot/space equivalenceCVE-2026-9697Highundici: undici vulnerable to TLS certificate validation bypass via dropped requestTls in SOCKS5 ProxyAgentCVE-2026-9678Mediumundici: undici vulnerable to cross-user information disclosure via shared cache whitespace bypassCVE-2026-9675Highundici: undici WebSocket client vulnerable to denial of service via cumulative fragment bypassCVE-2026-82659Highnodemailer: Nodemailer: Message-level raw option bypasses disableFileAccess/disableUrlAccess, enabling arbitrary file read and full-response SSRF in…CVE-2026-65898Mediumdompurify: DOMPurify: Permanent `ALLOWED_ATTR` pollution via `setConfig()` bypassing the hook clone-guard (incomplete fix of the 3.4.7 hook-pollution…CVE-2026-57133Highpraisonai: npm PraisonAI utility shell safe-command wrapper allowlist bypass via shell chainingCVE-2026-57137Highpraisonai: npm PraisonAI AgentLoop onToolCall approval runs after tool executionCVE-2026-57139Criticalpraisonai: npm PraisonAI MCPServer exposes unauthenticated HTTP tools/callCVE-2026-57140Criticalpraisonai: npm PraisonAI AgentOS exposes unauthenticated agent listing and invocationCVE-2026-57141Criticalpraisonai: PraisonAI: Remote Code Execution via Sandbox Escape in `codeMode` ToolCVE-2026-57136Highpraisonai: npm PraisonAI SandboxExecutor allowedCommands bypass via shell chainingCVE-2026-57138Criticalpraisonai: npm PraisonAI codeMode sandbox escape via Function constructorCVE-2026-57135Highpraisonai: npm PraisonAI SandboxExecutor network-isolated mode does not block non-proxy-aware network clientsCVE-2026-57134Highpraisonai: npm PraisonAI MCPSecurity Basic/OAuth authentication policies accept invalid credentials without validation

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo