npm vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2026-44113Mediumopenclaw: OpenClaw: OpenShell FS bridge reads pin and verify the opened file before returning bytes CVE-2026-44112Mediumopenclaw: OpenClaw: OpenShell FS bridge writes stay pinned to the sandbox mount root CVE-2026-41893Highsignalk-server: Signal K Server's WebSocket Login Endpoint Lacks Rate Limiting (Credential Brute-Force)GHSA-X3H8-JRGH-P8JXMediumopenclaw: OpenClaw's exec allowlist analysis rejects shell expansion in unquoted heredocs CVE-2026-44118Highopenclaw: OpenClaw: MCP loopback owner context is derived from server-issued bearer tokens CVE-2026-45003Mediumopenclaw: OpenClaw: Workspace dotenv files cannot override connector endpoint hosts CVE-2026-44997Mediumopenclaw: OpenClaw's ACP child sessions inherit subagent security envelope constraints CVE-2026-44116Mediumopenclaw: OpenClaw validates Zalo outbound photo URLs through the SSRF guard CVE-2026-41358Lowopenclaw: OpenClaw: Slack thread context could include messages from non-allowlisted senders CVE-2026-24118Criticalvm2: VM2 Sandbox Breakout Through __lookupGetter__CVE-2026-7738Low@puchunjie/doc-tools-mcp: @puchunjie/doc-tools-mcp has a Path Traversal Issue CVE-2026-7645Mediumsublinear-time-solver: sublinear-time-solver has a Path Traversal Issue CVE-2026-7600Lowyii2-mcp-server: yii2-mcp-server has a Command Injection Issue CVE-2026-40201Medium@diplodoc/search-extension: @diplodoc/search-extension allows stored XSS via Markdown file title CVE-2026-42349High@clerk/shared: Clerk has an authorization bypass when combining organization, billing, or reverification checks CVE-2026-42449Highn8n-mcp: n8n-mcp's IPv4-mapped IPv6 addresses bypass SSRF protection in validateUrlSync(), enabling full SSRF for SDK embedders CVE-2026-40171High@jupyter-notebook/help-extension: Jupyter Notebook Vulnerable to Authentication Token Theft via CommandLinker XSS CVE-2026-7446Mediummcp-server-semgrep: mcp-server-semgrep has a Command Injection issue CVE-2026-41686Medium@anthropic-ai/sdk: Claude SDK for TypeScript has Insecure Default File Permissions in Local Filesystem Memory Tool CVE-2026-42353Highi18next-http-middleware: i18next-http-middleware has path traversal / SSRF via user-controlled language and namespace parameters CVE-2026-41680Highmarked: Marked Vulnerable to OOM Denial of Service via Infinite Recursion in marked Tokenizer GHSA-GFG9-5357-HV4CMediumopenclaw: OpenClaw: Webchat audio embedding could read local files without local-root containment CVE-2026-44991Mediumopenclaw: OpenClaw: Owner-enforced commands could accept wildcard channel senders as command owners CVE-2026-42232Criticaln8n: n8n has XML Node Prototype Pollution that to RCE CVE-2026-42231Criticaln8n: n8n has Prototype Pollution in XML Webhook Body Parser that Leads to RCE

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Browse by ecosystem

Stop the waste.Protect your environment with Kodem.

Stop the waste.
Protect your environment with Kodem.