npm vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2026-42426Mediumopenclaw: OpenClaw `node.pair.approve` placed in `operator.write` scope instead of `operator.pairing` allows unprivileged pairing approval CVE-2026-41911Lowopenclaw: OpenClaw: Feishu docx upload_file/upload_image Bypasses Workspace-Only Filesystem Policy (GHSA-qf48-qfv4-jjm9 Incomplete Fix)CVE-2026-41914Mediumopenclaw: OpenClaw QQ Bot Extension missing SSRF Protection on All Media Fetch Paths CVE-2026-42421Mediumopenclaw: OpenClaw: Existing WS sessions survive shared gateway token rotation CVE-2026-41913Lowopenclaw: OpenClaw: Concurrent async auth attempts can bypass the intended shared-secret rate-limit budget on Tailscale-capable paths CVE-2026-42432Highopenclaw: OpenClaw: Node Pairing Reconnect Command Escalation Bypasses operator.admin Scope Requirement CVE-2026-41910Mediumopenclaw: OpenClaw: /allowlist omits owner-only enforcement for cross-channel allowlist writes CVE-2026-41916Mediumopenclaw: OpenClaw: resolvedAuth closure becomes stale after config reload CVE-2026-42431Mediumopenclaw: OpenClaw `node.invoke(browser.proxy)` bypasses `browser.request` persistent profile-mutation guard CVE-2026-42422Mediumopenclaw: OpenClaw `device.token.rotate` mints tokens for unapproved roles, bypassing device role-upgrade pairing CVE-2026-42424Mediumopenclaw: OpenClaw: Shared reply MEDIA - paths are treated as trusted and can trigger cross-channel local file exfiltration CVE-2026-42423Mediumopenclaw: OpenClaw: strictInlineEval explicit-approval boundary bypassed by approval-timeout fallback on gateway and node exec hosts CVE-2025-62718Mediumaxios: Axios has a NO_PROXY Hostname Normalization Bypass that Leads to SSRF CVE-2026-35041Mediumfast-jwt: fast-jwt has a ReDoS when using RegExp in allowed* leading to CPU exhaustion during token verification CVE-2026-35040Mediumfast-jwt: fast-jwt: Stateful RegExp (/g or /y) causes non-deterministic allowed-claim validation (logical DoS)CVE-2026-42427Highopenclaw: OpenClaw: HGRCPATH, CARGO_BUILD_RUSTC_WRAPPER, RUSTC_WRAPPER, and MAKEFLAGS missing from exec env denylist — RCE via build tool env…GHSA-JF56-MCCX-5F3FHighopenclaw: OpenClaw: Authenticated `/hooks/wake` and mapped `wake` payloads are promoted into the trusted `System:` prompt channel GHSA-GFMX-PPH7-G46XHighopenclaw: OpenClaw: Lower-trust background runtime output is injected into trusted `System:` events, and local async exec completion misses the…CVE-2026-5842Medium9router: decolua 9router vulnerable to authorization bypass CVE-2026-5833Lowmcp-server-taskwarrior: awwaiid mcp-server-taskwarrior vulnerable to command injection CVE-2026-5832Mediumapi-lab-mcp: api-lab-mcp vulnerable to SSRF CVE-2026-5831Mediumtaskflow-ai: Agions taskflow-ai vulnerable to os command injection in src/mcp/server/handlers.ts GHSA-5478-66C3-RHXRHigh@chenglou/pretext: Pretext: Algorithmic Complexity (DoS) in the text analysis phase CVE-2026-39983Highbasic-ftp: basic-ftp has FTP Command Injection via CRLF CVE-2026-39974Highn8n-mcp: n8n-mcp has authenticated SSRF via instance-URL header in multi-tenant HTTP mode

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo