npm vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2026-41354Mediumopenclaw: OpenClaw: Zalo replay dedupe keys could suppress messages across chats or sendersCVE-2026-41372Mediumopenclaw: OpenClaw: Trailing-dot localhost CDP hosts could bypass remote loopback protectionsGHSA-W6WX-JQ6J-6MCJMediumopenclaw: OpenClaw: pnpm dlx approvals did not bind local script operandsGHSA-98CH-45WP-CH47Mediumopenclaw: OpenClaw: Windows-compatible env override keys could bypass system.run approval bindingCVE-2026-41339Mediumopenclaw: OpenClaw: Gateway hello snapshots exposed host config and state paths to non-admin clientsCVE-2026-41295Mediumopenclaw: OpenClaw: Untrusted workspace channel shadows could execute during built-in channel setupCVE-2026-41298Mediumopenclaw: OpenClaw: Read-scoped identity-bearing HTTP clients could kill sessions via /sessions/:sessionKey/killCVE-2026-41398Mediumopenclaw: OpenClaw: iOS A2UI bridge trusted generic local-network pages for agent.request dispatchGHSA-846P-HGPV-VPHCMediumopenclaw: OpenClaw: QQ Bot structured payloads could read arbitrary local filesCVE-2026-41383Mediumopenclaw: OpenClaw: OpenShell mirror mode could delete arbitrary remote directories when roots were mis-scopedGHSA-FQRJ-M88P-QF3VLowopenclaw: OpenClaw: Zalo replay dedupe cache could suppress events across authenticated webhook targetsCVE-2026-41346Mediumopenclaw: OpenClaw: Pairing pending-request caps were enforced per channel instead of per accountCVE-2026-41301Mediumopenclaw: OpenClaw: Forged Nostr DMs could create pairing state before signature verificationCVE-2026-41392Mediumopenclaw: OpenClaw: Shell init-file options could satisfy exec allowlist script matchingCVE-2026-41355Mediumopenclaw: OpenClaw: OpenShell `mirror` mode can convert untrusted sandbox files into explicitly enabled workspace hooks and execute them on the host…CVE-2026-41359Highopenclaw: OpenClaw: Gateway operator.write Can Reach Admin-Class Telegram Config and Cron Persistence via sendGHSA-FWJQ-XWFJ-GV75Mediumopenclaw: OpenClaw: `session_status` still bypasses configured `tools.sessions.visibility` for unsandboxed invocations CVE-2026-41379Mediumopenclaw: OpenClaw: Gateway operator.write Can Reach Admin-Class Talk Voice Config Persistence via chat.sendCVE-2026-41384Highopenclaw: OpenClaw Has Incomplete Fix for CVE-2026-4039: CLI Backend Environment Variable Injection via Workspace ConfigCVE-2026-41297Mediumopenclaw: OpenClaw: Marketplace Plugin Download Follows Redirects Without SSRF ProtectionCVE-2026-41408Mediumopenclaw: OpenClaw: Tlon media downloads can bypass core safety limits and exhaust diskCVE-2026-41375Mediumopenclaw: OpenClaw: `/phone arm`/`/phone disarm` Bypasses `operator.admin` Scope Check for External Channels CVE-2026-34148High@fedify/fedify: Fedify affected by resource exhaustion caused by unbounded redirect following during remote key/document resolutionCVE-2026-34781Lowelectron: Electron: Crash in clipboard.readImage() on malformed clipboard image dataCVE-2026-34765Mediumelectron: Electron: Named window.open targets not scoped to the opener's browsing context

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo