Kodem's Vulnerability Database

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2026-53813Highopenclaw: OpenClaw: Fake package roots could influence memory-core artifact loading CVE-2026-53819Highopenclaw: OpenClaw: Workspace .env could override Homebrew executable selection for skill install flows GHSA-77PV-3W4Q-VRJ5Mediumopenclaw: OpenClaw: QQBot pre-dispatch slash commands could skip allowFrom checks GHSA-XR4F-MJXJ-W6W5Highopenclaw: OpenClaw: Non-owner chat senders could issue device-pairing bootstrap codes GHSA-HCM3-8F6R-6XWGMediumopenclaw: OpenClaw: Browser debug/export routes could reuse already-open blocked tabs GHSA-GRC3-2J34-P6GMMediumopenclaw: OpenClaw: message.action forwarding could send Gateway credentials to model-supplied loopback URLs GHSA-W4V6-G3WM-W36CCriticalopenclaw: OpenClaw: QQBot admin commands could skip DM-only and allowFrom policy GHSA-GP79-M99V-GJMHMediumopenclaw: OpenClaw: Mattermost handlers could fall open when channel type was missing GHSA-QJPC-QF9M-XWMRHighopenclaw: OpenClaw: Trusted-proxy Control UI WebSocket accepted client-declared scopes before pairing GHSA-C29C-2Q9C-PC86Highopenclaw: OpenClaw: Slack allowFrom could bind to mutable display names GHSA-CQWV-9QJX-VXW2Mediumopenclaw: OpenClaw: Skill Workshop apply flow could override pending approval GHSA-JVM4-4J77-39P6Highopenclaw: OpenClaw: QQBot streaming command could mutate config without explicit allowFrom GHSA-83W9-H5WV-J9XMHighopenclaw: OpenClaw: Node pairing reconnection could confuse approval scope state GHSA-WV26-J37Q-2G7PMediumopenclaw: OpenClaw's Slack plugin approvals used the exec approver gate for plugin actions GHSA-P2FH-F5FC-44HRMediumopenclaw: OpenClaw: memory-wiki ingest could read local files with operator.write scope GHSA-HW9R-H9MR-4JFFHighopenclaw: OpenClaw: Scoped chat.send route inheritance could bypass admin command scope gates GHSA-MHQ8-78PJ-5J79Highopenclaw: OpenClaw's POSIX node system.run safe-bin allowlist could be widened by shell expansion CVE-2026-35630Highopenclaw: OpenClaw: QQBot native approval buttons did not enforce configured approver identity CVE-2026-53814Highopenclaw: OpenClaw: Hook-triggered CLI runs could receive owner MCP tool authority CVE-2026-53817Highopenclaw: OpenClaw: Control UI locality spoofing could mint a durable admin device token GHSA-RGGC-M335-3WVJHighopenclaw: OpenClaw: Same-host trusted-proxy deployments could accept local forged identity headers CVE-2026-53810Highopenclaw: OpenClaw's marketplace runtime extension metadata could point at unscanned payloads CVE-2026-53812Mediumopenclaw: OpenClaw's browser act interactions could bypass private-network navigation checks GHSA-2J8V-HWGC-X698HighOpenclaw: OpenClaw: Shell wrapper argv could change between approval and execution GHSA-QH2F-99MV-MRCFMediumopenclaw: OpenClaw: Bundle MCP loopback could miss its exec denylist on session spawn

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo