npm vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2026-43532Mediumopenclaw: OpenClaw: Discord event cover images bypassed sandbox media normalization CVE-2026-43574Mediumopenclaw: OpenClaw: Empty approver lists could grant explicit approval authorization CVE-2026-43534Mediumopenclaw: OpenClaw: Agent hook events could enqueue trusted system events from unsanitized external input CVE-2026-43584Highopenclaw: OpenClaw: Exec environment denylist missed high-risk interpreter startup variables CVE-2026-42435Mediumopenclaw: OpenClaw: Shell-wrapper detection missed env-argv assignment injection forms CVE-2026-43568Mediumopenclaw: OpenClaw: Memory dreaming config persistence was reachable from operator.write commands CVE-2026-43572Lowopenclaw: OpenClaw: Microsoft Teams SSO invoke handler missed sender authorization checks CVE-2026-43583Lowopenclaw: OpenClaw: Delivery queue recovery could lose group tool-policy context for media replay GHSA-G375-H3V6-4873Mediumopenclaw: OpenClaw: Heartbeat owner downgrade missed local async exec completion events CVE-2026-42437Highopenclaw: OpenClaw: Voice-call realtime WebSocket accepted oversized frames CVE-2026-43566Mediumopenclaw: OpenClaw: Heartbeat owner downgrade missed untrusted webhook wake events CVE-2026-42436Mediumopenclaw: OpenClaw: Browser snapshot and screenshot routes could expose internal page content after navigation CVE-2026-43528Highopenclaw: OpenClaw: config.get redaction bypass through sourceConfig and runtimeConfig aliases CVE-2026-43535Mediumopenclaw: OpenClaw: Collect-mode queue batches could reuse the last sender authorization context CVE-2026-41279Highflowise: Flowise: Unauthenticated TTS endpoint accepts arbitrary credential IDs — enables API credit abuse via stored credentials CVE-2026-41278Highflowise: Flowise: Public chatflow endpoints return unsanitized flowData including plaintext API keys, passwords, and credential IDs CVE-2026-41277Highflowise: Flowise: Mass Assignment in DocumentStore Create Endpoint Leads to Cross-Workspace Object Takeover (IDOR)CVE-2026-40931Highcompressing: Complete Bypass of CVE-2026-24884 Patch via Git-Delivered Symlink Poisoning in compressing GHSA-92JP-89MQ-4374Mediumopenclaw: OpenClaw: Sandbox noVNC helper route exposed interactive browser session credentials CVE-2026-42259Medium@saltcorn/server: Saltcorn: Open Redirect in `POST /auth/login` due to incomplete `is_relative_url` validation (backslash bypass)CVE-2026-41478Critical@saltcorn/server: Saltcorn: SQL Injection via Unparameterized Sync Endpoints (maxLoadedId)GHSA-3XX2-MQJM-HG9XCritical@paperclipai/server: Paperclip: Cross-tenant agent API key IDOR in `/agents/:id/keys` routes allows full victim-company compromise GHSA-FPW4-P57J-HQMQMedium@paperclipai/ui: Paperclip: Stored XSS via javascript: URLs in MarkdownBody — urlTransform override disables react-markdown sanitization GHSA-P7MM-R948-4Q3QMedium@paperclipai/server: Paperclip: Approval decision attribution spoofing via client-controlled `decidedByUserId` in paperclip server GHSA-47WQ-CJ9Q-WPMPCritical@paperclipai/server: Paperclip: Cross-tenant agent API token minting via missing assertCompanyAccess on /api/agents/:id/keys

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo