---
title: "Critical npm advisories (page 3)"
url: https://erroneo.us/security/ecosystem/npm/3/
description: "All 499 critical GitHub-reviewed npm security advisories since October 2023, newest first, with vulnerable ranges and fixed versions. Page 3 of 5."
type: ecosystem
section: "Security Digest"
date_modified: 2026-05-07
publisher: erroneo.us
author: erroneo.us Security Desk
license: All rights reserved. Quote with attribution and a link.
---

# Critical npm advisories (page 3)

- 2026-05-07 [GHSA-54pg-9963-v8vg](https://erroneo.us/security/ghsa/GHSA-54pg-9963-v8vg/index.md) Compromised version of intercom-client published to npm — intercom-client = 7.0.4 → no fix
- 2026-05-07 [CVE-2025-63706](https://erroneo.us/security/cve/CVE-2025-63706/index.md) next-npm-version is vulnerable to Command injection — @jswork/next-npm-version = 1.0.1 → no fix
- 2026-05-06 [CVE-2026-44005](https://erroneo.us/security/cve/CVE-2026-44005/index.md) vm2: Mutable Proxies for Host Intrinsic Prototypes Allows Sandbox Escape — vm2 >= 3.9.6, <= 3.10.5 → 3.11.0
- 2026-05-06 [CVE-2026-44006](https://erroneo.us/security/cve/CVE-2026-44006/index.md) vm2 has a Sandbox Escape Vulnerability — vm2 <= 3.10.5 → 3.11.0
- 2026-05-06 [CVE-2026-44351](https://erroneo.us/security/cve/CVE-2026-44351/index.md) fast-jwt: JWT auth bypass due to empty HMAC secret accepted by async key resolver — fast-jwt <= 6.2.3 → 6.2.4
- 2026-05-06 [CVE-2026-43999](https://erroneo.us/security/cve/CVE-2026-43999/index.md) vm2 has a NodeVM builtin allowlist bypass via `module` builtin's `Module._load` that allows sandbox escape — vm2 = 3.10.5 → 3.11.0
- 2026-05-06 [CVE-2026-44007](https://erroneo.us/security/cve/CVE-2026-44007/index.md) vm2 NodeVM `nesting: true` bypasses `require: false` allowing sandbox escape and arbitrary OS command execution — vm2 <= 3.11.0 → 3.11.1
- 2026-05-06 [CVE-2026-43997](https://erroneo.us/security/cve/CVE-2026-43997/index.md) vm2 Access to Host Object Enables Sandbox Escape — vm2 <= 3.10.5 → 3.11.0
- 2026-05-05 [CVE-2026-24781](https://erroneo.us/security/cve/CVE-2026-24781/index.md) VM2 Has Sandbox Breakout Through Inspect Function — vm2 <= 3.10.3 → 3.11.0
- 2026-05-05 [CVE-2026-24120](https://erroneo.us/security/cve/CVE-2026-24120/index.md) VM2 Has Sandbox Breakout Through Promise Species — vm2 <= 3.10.3 → 3.10.5
- 2026-05-05 [CVE-2026-42281](https://erroneo.us/security/cve/CVE-2026-42281/index.md) MagicMirror vulnerable to unauthenticated SSRF via /cors endpoint — magicmirror <= 2.35.0 → 2.36.0
- 2026-05-05 [CVE-2026-26956](https://erroneo.us/security/cve/CVE-2026-26956/index.md) VM2 Has a WASM Sandbox Escape — vm2 <= 3.10.4 → 3.10.5
- 2026-05-05 [CVE-2026-26332](https://erroneo.us/security/cve/CVE-2026-26332/index.md) VM2 Has a Sandbox Escape Issue via SuppressedError — vm2 <= 3.10.4 → 3.11.0
- 2026-05-04 [CVE-2026-24118](https://erroneo.us/security/cve/CVE-2026-24118/index.md) VM2 Sandbox Breakout Through __lookupGetter__ — vm2 <= 3.10.4 → 3.11.0
- 2026-04-29 [CVE-2026-42231](https://erroneo.us/security/cve/CVE-2026-42231/index.md) n8n has Prototype Pollution in XML Webhook Body Parser that Leads to RCE — n8n < 1.123.32 → 1.123.32; n8n >= 2.18.0, < 2.18.1 → 2.18.1; n8n >= 2.17.0, < 2.17.4 → 2.17.4
- 2026-04-29 [CVE-2026-42232](https://erroneo.us/security/cve/CVE-2026-42232/index.md) n8n has XML Node Prototype Pollution that to RCE — n8n >= 2.18.0, < 2.18.1 → 2.18.1; n8n >= 2.17.0, < 2.17.4 → 2.17.4; n8n < 1.123.32 → 1.123.32
- 2026-04-24 [CVE-2026-12537](https://erroneo.us/security/cve/CVE-2026-12537/index.md) Gemini CLI: Remote Code Execution via workspace trust and tool allowlisting bypasses — @google/gemini-cli < 0.39.1 → 0.39.1; @google/gemini-cli = 0.40.0-preview.2 → 0.40.0-preview.3; google-github-actions/run-gemini-cli < 0.1.22 → 0.1.22
- 2026-04-24 [CVE-2026-41501](https://erroneo.us/security/cve/CVE-2026-41501/index.md) electerm has Command Injection via runLinux funtion — electerm < 3.3.8 → 3.3.8
- 2026-04-22 [CVE-2026-42076](https://erroneo.us/security/cve/CVE-2026-42076/index.md) Evolver: Command Injection via `execSync` in `_extractLLM()` function allows Remote Code Execution — @evomap/evolver < 1.69.3 → 1.69.3
- 2026-04-21 [CVE-2026-41264](https://erroneo.us/security/cve/CVE-2026-41264/index.md) Flowise: CSV Agent Prompt Injection Remote Code Execution Vulnerability — flowise <= 3.0.13 → 3.1.0; flowise-components <= 3.0.13 → 3.1.0
- 2026-04-17 [CVE-2026-43585](https://erroneo.us/security/cve/CVE-2026-43585/index.md) OpenClaw: Gateway HTTP endpoints re-resolve bearer auth after SecretRef rotation — openclaw < 2026.4.15 → 2026.4.15
- 2026-04-17 [CVE-2026-44109](https://erroneo.us/security/cve/CVE-2026-44109/index.md) OpenClaw: Feishu webhook and card-action validation now fail closed — openclaw < 2026.4.15 → 2026.4.15
- 2026-04-17 [CVE-2026-41265](https://erroneo.us/security/cve/CVE-2026-41265/index.md) Flowise: Airtable_Agent Code Injection Remote Code Execution Vulnerability — flowise <= 3.0.13 → 3.1.0; flowise-components <= 3.0.13 → 3.1.0
- 2026-04-17 [CVE-2026-41507](https://erroneo.us/security/cve/CVE-2026-41507/index.md) Remote Code Execution (RCE) via String Literal Injection into math-codegen — math-codegen < 0.4.3 → 0.4.3
- 2026-04-16 [CVE-2026-41242](https://erroneo.us/security/cve/CVE-2026-41242/index.md) Arbitrary code execution in protobufjs — protobufjs >= 8.0.0, < 8.0.1 → 8.0.1; protobufjs < 7.5.5 → 7.5.5
- 2026-04-16 [CVE-2026-41500](https://erroneo.us/security/cve/CVE-2026-41500/index.md) electerm: electerm_install_script_CommandInjection Vulnerability Report — electerm < 3.3.8 → 3.3.8
- 2026-04-16 [GHSA-vr7g-88fq-vhq3](https://erroneo.us/security/ghsa/GHSA-vr7g-88fq-vhq3/index.md) Paperclip: OS Command Injection via Execution Workspace cleanupCommand — @paperclipai/server < 2026.416.0 → 2026.416.0
- 2026-04-16 [CVE-2026-41248](https://erroneo.us/security/cve/CVE-2026-41248/index.md) Official Clerk JavaScript SDKs: Middleware-based route protection bypass — @clerk/nextjs >= 5.0.0, < 5.7.6 → 5.7.6; @clerk/nuxt >= 1.1.0, < 1.13.28 → 1.13.28; @clerk/astro >= 0.0.1, < 1.5.7 → 1.5.7
- 2026-04-16 [CVE-2026-41478](https://erroneo.us/security/cve/CVE-2026-41478/index.md) Saltcorn: SQL Injection via Unparameterized Sync Endpoints (maxLoadedId) — @saltcorn/server < 1.4.6 → 1.4.6; @saltcorn/server >= 1.5.0-beta.0, < 1.5.6 → 1.5.6; @saltcorn/server >= 1.6.0-alpha.0, < 1.6.0-beta.5 → 1.6.0-beta.5
- 2026-04-16 [CVE-2026-40933](https://erroneo.us/security/cve/CVE-2026-40933/index.md) Flowise: Authenticated RCE Via MCP Adapters — flowise <= 3.0.13 → 3.1.0; flowise-components <= 3.0.13 → 3.1.0
- 2026-04-16 [CVE-2026-41137](https://erroneo.us/security/cve/CVE-2026-41137/index.md) Flowise: Code Injection in CSVAgent leads to Authenticated RCE — flowise <= 3.0.13 → 3.1.0; flowise-components <= 3.0.13 → 3.1.0
- 2026-04-16 [CVE-2026-41428](https://erroneo.us/security/cve/CVE-2026-41428/index.md) Budibase: Authentication Bypass via Unanchored Regex in Public Endpoint Matcher — Unauthenticated Access to Protected Endpoints — @budibase/backend-core <= 3.35.3 → no fix
- 2026-04-16 [CVE-2026-6270](https://erroneo.us/security/cve/CVE-2026-6270/index.md) @fastify/middie vulnerable to middleware authentication bypass in child plugin scopes — @fastify/middie <= 9.3.1 → 9.3.2
- 2026-04-16 [GHSA-47wq-cj9q-wpmp](https://erroneo.us/security/ghsa/GHSA-47wq-cj9q-wpmp/index.md) Paperclip: Cross-tenant agent API token minting via missing assertCompanyAccess on /api/agents/:id/keys — @paperclipai/server < 2026.416.0 → 2026.416.0
- 2026-04-16 [GHSA-3xx2-mqjm-hg9x](https://erroneo.us/security/ghsa/GHSA-3xx2-mqjm-hg9x/index.md) Paperclip: Cross-tenant agent API key IDOR in `/agents/:id/keys` routes allows full victim-company compromise — @paperclipai/server < 2026.416.0 → 2026.416.0
- 2026-04-15 [CVE-2026-33807](https://erroneo.us/security/cve/CVE-2026-33807/index.md) @fastify/express's middleware path doubling causes authentication bypass in child plugin scopes — @fastify/express <= 4.0.4 → 4.0.5
- 2026-04-15 [CVE-2026-33805](https://erroneo.us/security/cve/CVE-2026-33805/index.md) Fastify's connection header abuse enables stripping of proxy-added headers — @fastify/reply-from <= 12.6.1 → 12.6.2; @fastify/http-proxy <= 11.4.3 → 11.4.4
- 2026-04-15 [CVE-2026-33808](https://erroneo.us/security/cve/CVE-2026-33808/index.md) @fastify/express has a middleware authentication bypass via URL normalization gaps (duplicate slashes and semicolons) — @fastify/express <= 4.0.4 → 4.0.5
- 2026-04-14 [CVE-2025-61260](https://erroneo.us/security/cve/CVE-2025-61260/index.md) OpenAI Codex CLI enables code execution through malicious MCP (Model Context Protocol) configuration files — @openai/codex <= 0.23.0 → no fix
- 2026-04-14 [CVE-2026-40887](https://erroneo.us/security/cve/CVE-2026-40887/index.md) @vendure/core has a SQL Injection vulnerability — @vendure/core >= 3.0.0, < 3.5.7 → 3.5.7; @vendure/core >= 3.6.0, < 3.6.2 → 3.6.2; @vendure/core >= 1.7.4, < 2.3.4 → 2.3.4
- 2026-04-10 [CVE-2026-41679](https://erroneo.us/security/cve/CVE-2026-41679/index.md) paperclip Vulnerable to Unauthenticated Remote Code Execution via Import Authorization Bypass — paperclipai < 2026.410.0 → 2026.410.0; @paperclipai/server < 2026.410.0 → 2026.410.0
- 2026-04-07 [CVE-2026-39397](https://erroneo.us/security/cve/CVE-2026-39397/index.md) @delmaredigital/payload-puc is missing authorization on /api/puck/* CRUD endpoints allows unauthenticated access to Puck-registered collections — @delmaredigital/payload-puck < 0.6.23 → 0.6.23
- 2026-04-03 [CVE-2026-33950](https://erroneo.us/security/cve/CVE-2026-33950/index.md) Signal K Server: Privilege Escalation by Admin Role Injection via /enableSecurity — signalk-server < 2.24.0-beta.4 → 2.24.0-beta.4
- 2026-04-03 [CVE-2026-35216](https://erroneo.us/security/cve/CVE-2026-35216/index.md) Budibase: Unauthenticated Remote Code Execution via Webhook Trigger and Bash Automation Step — @budibase/server < 3.33.4 → 3.33.4
- 2026-04-03 [CVE-2026-31818](https://erroneo.us/security/cve/CVE-2026-31818/index.md) Budibase: Server-Side Request Forgery via REST Connector with Empty Default Blacklist — @budibase/backend-core < 3.33.4 → 3.33.4
- 2026-04-03 [CVE-2026-34208](https://erroneo.us/security/cve/CVE-2026-34208/index.md) SandboxJS: Sandbox integrity escape — @nyariv/sandboxjs < 0.8.36 → 0.8.36
- 2026-04-02 [GHSA-xg6x-h9c9-2m83](https://erroneo.us/security/ghsa/GHSA-xg6x-h9c9-2m83/index.md) Better Auth Has Two-Factor Authentication Bypass via Premature Session Caching (session.cookieCache) — better-auth < 1.4.9 → 1.4.9
- 2026-04-02 [CVE-2026-35039](https://erroneo.us/security/cve/CVE-2026-35039/index.md) fast-jwt: Cache Confusion via cacheKeyBuilder Collisions Can Return Claims From a Different Token (Identity/Authorization Mixup) — fast-jwt >= 0.0.1, < 6.2.0 → 6.2.0
- 2026-04-02 [CVE-2026-34950](https://erroneo.us/security/cve/CVE-2026-34950/index.md) fast-jwt: Incomplete fix for CVE-2023-48223: JWT Algorithm Confusion via Whitespace-Prefixed RSA Public Key — fast-jwt <= 6.1.0 → 6.2.0
- 2026-04-02 [CVE-2026-41329](https://erroneo.us/security/cve/CVE-2026-41329/index.md) OpenClaw: Heartbeat context inheritance bypasses sandbox via senderIsOwner escalation — openclaw <= 2026.3.28 → 2026.3.31
- 2026-04-02 [CVE-2026-41296](https://erroneo.us/security/cve/CVE-2026-41296/index.md) OpenClaw: Sandbox escape via TOCTOU race in remote FS bridge readFile — openclaw <= 2026.3.28 → 2026.3.31
- 2026-04-02 [CVE-2026-34841](https://erroneo.us/security/cve/CVE-2026-34841/index.md) Axios npm Supply Chain Incident Impacting @usebruno/cli — @usebruno/cli < 3.2.0 → 3.2.1
- 2026-04-02 [GHSA-3hfp-gqgh-xc5g](https://erroneo.us/security/ghsa/GHSA-3hfp-gqgh-xc5g/index.md) Axios supply chain attack - dependency in @lightdash/cli may resolve to compromised axios versions — @lightdash/cli >= 0.1800.0, < 0.2695.1 → 0.2695.1
- 2026-04-01 [CVE-2026-34751](https://erroneo.us/security/cve/CVE-2026-34751/index.md) Payload: Pre-Authentication Account Takeover via Parameter Injection in Password Recovery — payload < 3.79.1 → 3.79.1; @payloadcms/graphql < 3.79.1 → 3.79.1
- 2026-03-31 [CVE-2026-34532](https://erroneo.us/security/cve/CVE-2026-34532/index.md) parse-server has cloud function validator bypass via prototype chain traversal — parse-server >= 9.0.0, < 9.7.0-alpha.11 → 9.7.0-alpha.11; parse-server < 8.6.67 → 8.6.67
- 2026-03-31 [CVE-2026-33579](https://erroneo.us/security/cve/CVE-2026-33579/index.md) OpenClaw: /pair approve command path omitted caller scope subsetting and reopened device pairing escalation — openclaw <= 2026.3.24 → 2026.3.28
- 2026-03-31 [CVE-2026-41294](https://erroneo.us/security/cve/CVE-2026-41294/index.md) OpenClaw has a CWD `.env` environment variable injection which bypasses host-env policy and allows config takeover — openclaw <= 2026.3.24 → 2026.3.28
- 2026-03-30 [CVE-2026-34156](https://erroneo.us/security/cve/CVE-2026-34156/index.md) NocoBase Affected by Sandbox Escape to RCE via console._stdout Prototype Chain Traversal in Workflow Script Node — @nocobase/plugin-workflow-javascript <= 2.0.27 → 2.0.28
- 2026-03-29 [CVE-2026-34220](https://erroneo.us/security/cve/CVE-2026-34220/index.md) MikroORM is vulnerable to SQL Injection via specially crafted object — @mikro-orm/core < 6.6.10 → 6.6.10; @mikro-orm/core >= 7.0.0-dev.0, < 7.0.6 → 7.0.6
- 2026-03-29 [GHSA-8x4m-qw58-3pcx](https://erroneo.us/security/ghsa/GHSA-8x4m-qw58-3pcx/index.md) mppx has multiple payment bypass and griefing vulnerabilities — mppx < 0.4.8 → 0.4.8
- 2026-03-27 [GHSA-fqw4-mph7-2vr8](https://erroneo.us/security/ghsa/GHSA-fqw4-mph7-2vr8/index.md) OpenClaw: Silent privilege escalation via gateway shared-auth reconnect — openclaw <= 2026.3.24 → no fix
- 2026-03-27 [CVE-2026-35663](https://erroneo.us/security/cve/CVE-2026-35663/index.md) OpenClaw: Gateway Backend Reconnect lets Non-Admin Operator Scopes Self-Claim operator.admin — openclaw <= 2026.3.24 → no fix
- 2026-03-27 [CVE-2026-33937](https://erroneo.us/security/cve/CVE-2026-33937/index.md) Handlebars.js has JavaScript Injection via AST Type Confusion — handlebars >= 4.0.0, <= 4.7.8 → 4.7.9
- 2026-03-26 [CVE-2026-33696](https://erroneo.us/security/cve/CVE-2026-33696/index.md) n8n: Prototype Pollution in XML and GSuiteAdmin node parameters lead to RCE — n8n = 2.14.0 → 2.14.1; n8n >= 2.0.0-rc.0, < 2.13.3 → 2.13.3; n8n < 1.123.27 → 1.123.27
- 2026-03-26 [CVE-2026-35639](https://erroneo.us/security/cve/CVE-2026-35639/index.md) OpenClaw Gateway: RCE and Privilege Escalation from operator.pairing to operator.admin via device.pair.approve — openclaw < 2026.3.22 → 2026.3.22
- 2026-03-26 [CVE-2026-33863](https://erroneo.us/security/cve/CVE-2026-33863/index.md) Convict has prototype pollution via load(), loadFile(), and schema initialization — convict <= 6.2.4 → 6.2.5
- 2026-03-26 [CVE-2026-33864](https://erroneo.us/security/cve/CVE-2026-33864/index.md) Convict has Prototype Pollution via startsWith() function — convict <= 6.2.4 → 6.2.5
- 2026-03-25 [CVE-2026-26830](https://erroneo.us/security/cve/CVE-2026-26830/index.md) pdf-image has an OS Command Injection Vulnerability through its pdfFilePath parameter — pdf-image <= 2.0.0 → no fix
- 2026-03-25 [CVE-2026-26833](https://erroneo.us/security/cve/CVE-2026-26833/index.md) thumbler allows OS Command Injection — thumbler <= 1.1.2 → no fix
- 2026-03-25 [CVE-2026-26831](https://erroneo.us/security/cve/CVE-2026-26831/index.md) textract is vulnerable to OS Command Injection — textract <= 2.5.0 → no fix
- 2026-03-25 [CVE-2026-26832](https://erroneo.us/security/cve/CVE-2026-26832/index.md) node-tesseract-ocr is vulnerable to OS Command Injection through unsanitized recognize() function parameter — node-tesseract-ocr <= 2.2.1 → no fix
- 2026-03-25 [CVE-2026-33660](https://erroneo.us/security/cve/CVE-2026-33660/index.md) n8n has Multiple Remote Code Execution Vulnerabilities in Merge Node AlaSQL SQL Mode — n8n = 2.14.0 → 2.14.1; n8n >= 2.0.0-rc.0, < 2.13.3 → 2.13.3; n8n < 1.123.27 → 1.123.27
- 2026-03-22 [CVE-2026-4599](https://erroneo.us/security/cve/CVE-2026-4599/index.md) jsrsasign: Incomplete Comparison Allows DSA Private Key Recovery via Biased Nonce Generation — jsrsasign >= 7.0.0, < 11.1.1 → 11.1.1
- 2026-03-19 [GHSA-wvr4-3wq4-gpc5](https://erroneo.us/security/ghsa/GHSA-wvr4-3wq4-gpc5/index.md) MCP Connect has unauthenticated remote OS command execution via /bridge endpoint — mcp-bridge <= 2.0.0 → no fix
- 2026-03-18 [CVE-2026-32731](https://erroneo.us/security/cve/CVE-2026-32731/index.md) ApostropheCMS has Arbitrary File Write (Zip Slip / Path Traversal) in Import-Export Gzip Extraction — @apostrophecms/import-export <= 3.5.2 → 3.5.3
- 2026-03-17 [CVE-2026-31938](https://erroneo.us/security/cve/CVE-2026-31938/index.md) jsPDF has HTML Injection in New Window paths — jspdf <= 4.2.0 → 4.2.1
- 2026-03-13 [CVE-2026-32916](https://erroneo.us/security/cve/CVE-2026-32916/index.md) OpenClaw: Plugin subagent routes could bypass gateway authorization with synthetic admin scopes — openclaw >= 2026.3.7, < 2026.3.11 → 2026.3.11
- 2026-03-13 [CVE-2026-32304](https://erroneo.us/security/cve/CVE-2026-32304/index.md) Locutus vulnerable to RCE via unsanitized input in create_function() — locutus <= 3.0.13 → 3.0.14
- 2026-03-13 [CVE-2026-22172](https://erroneo.us/security/cve/CVE-2026-22172/index.md) OpenClaw: WebSocket shared-auth connections could self-declare elevated scopes — openclaw <= 2026.3.11 → 2026.3.12
- 2026-03-13 [CVE-2026-32621](https://erroneo.us/security/cve/CVE-2026-32621/index.md) Apollo Federation vulnerable to prototype pollution via incomplete key sanitization — @apollo/federation-internals < 2.9.6 → 2.9.6; @apollo/federation-internals >= 2.10.0, < 2.10.5 → 2.10.5; @apollo/federation-internals >= 2.11.0, < 2.11.6 → 2.11.6
- 2026-03-13 [CVE-2026-32306](https://erroneo.us/security/cve/CVE-2026-32306/index.md) OneUptime ClickHouse SQL Injection via Aggregate Query Parameters — oneuptime < 10.0.23 → 10.0.23
- 2026-03-13 [CVE-2026-26954](https://erroneo.us/security/cve/CVE-2026-26954/index.md) SandboxJS affected by a Sandbox Escape — @nyariv/sandboxjs <= 0.8.33 → 0.8.34
- 2026-03-13 [GHSA-4jpw-hj22-2xmc](https://erroneo.us/security/ghsa/GHSA-4jpw-hj22-2xmc/index.md) OpenClaw: Pairing-scoped device tokens could mint `operator.admin` and reach node RCE — openclaw < 2026.3.11 → 2026.3.11
- 2026-03-12 [CVE-2026-28792](https://erroneo.us/security/cve/CVE-2026-28792/index.md) TinaCMS CLI Dev Server Vulnerable to Cross-Origin File Exfiltration via CORS Misconfiguration + Path Traversal in TinaCMS — @tinacms/cli < 2.1.8 → 2.1.8
- 2026-03-12 [CVE-2026-32248](https://erroneo.us/security/cve/CVE-2026-32248/index.md) Parse Server: Account takeover via operator injection in authentication data identifier — parse-server >= 9.0.0, < 9.6.0-alpha.12 → 9.6.0-alpha.12; parse-server < 8.6.38 → 8.6.38
- 2026-03-12 [CVE-2026-32242](https://erroneo.us/security/cve/CVE-2026-32242/index.md) Parse Server's OAuth2 adapter shares mutable state across providers via singleton instance — parse-server >= 9.0.0, < 9.6.0-alpha.11 → 9.6.0-alpha.11; parse-server < 8.6.37 → 8.6.37
- 2026-03-10 [CVE-2026-29792](https://erroneo.us/security/cve/CVE-2026-29792/index.md) Feathers has an OAuth Callback Account Takeover issue — @feathersjs/authentication-oauth >= 5.0.0, <= 5.0.41 → 5.0.42
- 2026-03-10 [CVE-2026-28292](https://erroneo.us/security/cve/CVE-2026-28292/index.md) simple-git has blockUnsafeOperationsPlugin bypass via case-insensitive protocol.allow config key enables RCE — simple-git >= 3.15.0, < 3.32.3 → 3.32.3
- 2026-03-10 [CVE-2026-31840](https://erroneo.us/security/cve/CVE-2026-31840/index.md) Parse Server: SQL injection via dot-notation field name in PostgreSQL — parse-server >= 9.0.0, < 9.6.0-alpha.2 → 9.6.0-alpha.2; parse-server < 8.6.28 → 8.6.28
- 2026-03-10 [CVE-2026-31856](https://erroneo.us/security/cve/CVE-2026-31856/index.md) Parse Server vulnerable to SQL injection via `Increment` operation on nested object field in PostgreSQL — parse-server >= 9.0.0-alpha.1, < 9.6.0-alpha.3 → 9.6.0-alpha.3; parse-server < 8.6.29 → 8.6.29
- 2026-03-10 [CVE-2026-29793](https://erroneo.us/security/cve/CVE-2026-29793/index.md) Feathers has a NoSQL Injection via WebSocket id Parameter in MongoDB Adapter — @feathersjs/mongodb >= 5.0.0, <= 5.0.41 → 5.0.42
- 2026-03-10 [CVE-2026-31871](https://erroneo.us/security/cve/CVE-2026-31871/index.md) Parse Server vulnerable to SQL Injection via dot-notation sub-key name in `Increment` operation on PostgreSQL — parse-server >= 9.0.0-alpha.1, < 9.6.0-alpha.5 → 9.6.0-alpha.5; parse-server < 8.6.31 → 8.6.31
- 2026-03-10 [CVE-2026-31862](https://erroneo.us/security/cve/CVE-2026-31862/index.md) @siteboon/claude-code-ui is Vulnerable to Command Injection via Multiple Parameters — @siteboon/claudecodeui <= 1.23.0 → 1.24.0
- 2026-03-10 [CVE-2026-30965](https://erroneo.us/security/cve/CVE-2026-30965/index.md) Parse Server vulnerable to session token exfiltration via `redirectClassNameForKey` query parameter — parse-server >= 9.0.0-alpha.1, < 9.5.2-alpha.8 → 9.5.2-alpha.8; parse-server < 8.6.21 → 8.6.21
- 2026-03-10 [CVE-2026-30966](https://erroneo.us/security/cve/CVE-2026-30966/index.md) Parse Server has role escalation and CLP bypass via direct `_Join` table write — parse-server >= 9.0.0-alpha.1, < 9.5.2-alpha.7 → 9.5.2-alpha.7; parse-server < 8.6.20 → 8.6.20
- 2026-03-09 [CVE-2026-30863](https://erroneo.us/security/cve/CVE-2026-30863/index.md) Parse Server: JWT audience validation bypass in Google, Apple, and Facebook authentication adapters — parse-server >= 9.0.0-alpha.1, < 9.5.0-alpha.11 → 9.5.0-alpha.11; parse-server < 8.6.10 → 8.6.10
- 2026-03-09 [CVE-2026-30956](https://erroneo.us/security/cve/CVE-2026-30956/index.md) OneUptime has authorization bypass via client‑controlled is-multi-tenant-query header that leads to cross‑tenant data exposure and account takeover — @oneuptime/common < 10.0.21 → 10.0.21
- 2026-03-09 [CVE-2026-30957](https://erroneo.us/security/cve/CVE-2026-30957/index.md) OneUptime has Synthetic Monitor RCE via exposed Playwright browser object — @oneuptime/common < 10.0.21 → 10.0.21
- 2026-03-06 [CVE-2026-30887](https://erroneo.us/security/cve/CVE-2026-30887/index.md) OneUpTime's Unsandboxed Code Execution in Probe Allows Any Project Member to Achieve RCE — @oneuptime/common < 10.0.18 → 10.0.18
- 2026-03-06 [CVE-2026-30921](https://erroneo.us/security/cve/CVE-2026-30921/index.md) OneUptime: Synthetic Monitor RCE via exposed Playwright browser object — @oneuptime/common < 10.0.20 → 10.0.20

Pages: https://erroneo.us/security/ecosystem/npm/index.md · https://erroneo.us/security/ecosystem/npm/2/index.md · https://erroneo.us/security/ecosystem/npm/3/index.md · https://erroneo.us/security/ecosystem/npm/4/index.md · https://erroneo.us/security/ecosystem/npm/5/index.md

---
Source page: https://erroneo.us/security/ecosystem/npm/3/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt