Security Digest · page 4 of 5
Critical npm advisories (page 4)
499 critical advisories for npm packages since October 2023, newest first. Check your project with npm audit (or: npm ls <package>).
- Qwik vulnerable to Unauthenticated RCE via server$ Deserialization CVE-2026-27971 CVSS 9.2 Critical
@builder.io/qwik<= 1.19.0 → fixed in 1.19.1 - `@orpc/client` has Prototype Pollution via `StandardRPCJsonSerializer` Deserialization CVE-2026-28794 CVSS 9.3 Critical
@orpc/client<= 1.13.5 → fixed in 1.13.6 - OpenClaw Vulnerable to Remote Code Execution via Node Invoke Approval Bypass in Gateway CVE-2026-28466 CVSS 9.4 Critical
openclaw< 2026.2.14 → fixed in 2026.2.14 - OpenClaw gateway agents.files symlink escape allowed out-of-workspace file read/write CVE-2026-32013 CVSS 9.3 Critical
openclaw< 2026.2.25 → fixed in 2026.2.25 - CpenClaw's ACPX Windows wrapper shell fallback allowed cwd injection in specific paths CVE-2026-31999 CVSS 9.3 Critical
openclaw>= 2026.2.26, < 2026.3.1 → fixed in 2026.3.1 - OpenClaw is vulnerable to validation bypass through GNU long-option abbreviations in allowlist mode CVE-2026-28363 CVSS 9.9 Critical
openclaw< 2026.2.23 → fixed in 2026.2.23 - n8n has Arbitrary Command Execution via File Write and Git Operations CVE-2026-27498 CVSS 9.0 Critical
n8n< 1.123.8 → fixed in 1.123.8;n8n>= 2.0.0, < 2.2.0 → fixed in 2.2.0 - Angular SSR is vulnerable to SSRF and Header Injection via request handling pipeline CVE-2026-27739 CVSS 9.2 Critical
@angular/ssr>= 21.2.0-next.0, < 21.2.0-rc.0 → fixed in 21.2.0-rc.1;@angular/ssr>= 21.0.0-next.0, < 21.1.5 → fixed in 21.1.5;@angular/ssr>= 20.0.0-next.0, < 20.3.17 → fixed in 20.3.17; +3 more packages - n8n has Potential Remote Code Execution via Merge Node CVE-2026-27497 CVSS 9.4 Critical
n8n< 1.123.22 → fixed in 1.123.22;n8n>= 2.0.0, < 2.9.3 → fixed in 2.9.3;n8n>= 2.10.0, < 2.10.1 → fixed in 2.10.1 - n8n: Expression Sandbox Escape Leads to RCE CVE-2026-27577 CVSS 9.4 Critical
n8n< 1.123.22 → fixed in 1.123.22;n8n>= 2.0.0, < 2.9.3 → fixed in 2.9.3;n8n>= 2.10.0, < 2.10.1 → fixed in 2.10.1 - Budibase: Remote Code Execution via Unsafe eval() in View Filter Map Function (Budibase Cloud) CVE-2026-27702 CVSS 9.9 Critical
budibase< 3.30.4 → fixed in 3.30.4 - Parse Dashboard has incomplete authentication on AI Agent endpoint CVE-2026-27595 CVSS 9.9 Critical
parse-dashboard>= 7.3.0-alpha.42, < 9.0.0-alpha.8 → fixed in 9.0.0-alpha.8 - OneUptime: OS Command Injection in Probe NetworkPathMonitor via unsanitized destination in traceroute exec() CVE-2026-27728 CVSS 9.9 Critical
@oneuptime/common< 10.0.7 → fixed in 10.0.7 - n8n has a Sandbox Escape in its JavaScript Task Runner CVE-2026-27495 CVSS 9.4 Critical
n8n< 1.123.22 → fixed in 1.123.22;n8n>= 2.0.0, < 2.9.3 → fixed in 2.9.3;n8n>= 2.10.0, < 2.10.1 → fixed in 2.10.1 - @enclave-vm/core is vulnerable to Sandbox Escape CVE-2026-27597 CVSS 10.0 Critical
@enclave-vm/core<= 2.10.1 → fixed in 2.11.1 - Parse Dashboard is Missing Authorization for its Agent Endpoint CVE-2026-27608 CVSS 9.3 Critical
parse-dashboard>= 7.3.0-alpha.42, <= 9.0.0-alpha.7 → fixed in 9.0.0-alpha.8 - n8n has Unauthenticated Expression Evaluation via Form Node CVE-2026-27493 CVSS 9.5 Critical
n8n< 1.123.22 → fixed in 1.123.22;n8n>= 2.0.0, < 2.9.3 → fixed in 2.9.3;n8n>= 2.10.0, < 2.10.1 → fixed in 2.10.1 - Basic FTP has Path Traversal Vulnerability in its downloadToDir() method CVE-2026-27699 CVSS 9.1 Critical
basic-ftp< 5.2.0 → fixed in 5.2.0 - Parse Server: Account takeover via JWT algorithm confusion in Google auth adapter CVE-2026-27804 CVSS 9.3 Critical
parse-server>= 9.0.0, <= 9.3.1-alpha.3 → fixed in 9.3.1-alpha.4;parse-server<= 8.6.2 → fixed in 8.6.3 - OneUptime:: node:vm sandbox escape in probe allows any project member to achieve RCE CVE-2026-27574 CVSS 9.9 Critical
@oneuptime/common< 10.0.0 → fixed in 10.0.0 - ActualBudget server is Missing Authentication for SimpleFIN and Pluggy AI bank sync endpoints CVE-2026-27584 CVSS 9.2 Critical
@actual-app/sync-server< 26.2.1 → fixed in 26.2.1 - FUXA has JWT Authentication Bypass via HTTP Referer header spoofing CVE-2025-69985 CVSS 9.8 Critical
@frangoteam/fuxa<= 1.2.8 → no fix listed - fast-xml-parser has an entity encoding bypass via regex injection in DOCTYPE entity names CVE-2026-25896 CVSS 9.3 Critical
fast-xml-parser>= 5.0.0, < 5.3.5 → fixed in 5.3.5;fast-xml-parser>= 4.1.3, < 4.5.4 → fixed in 4.5.4 - Prototype pollution in swiper CVE-2026-27212 CVSS 9.4 Critical
swiper>= 6.5.1, < 12.1.2 → fixed in 12.1.2 - Ghost has a SQL injection in Content API CVE-2026-26980 CVSS 9.4 Critical
ghost>= 3.24.0, < 6.19.1 → fixed in 6.19.1 - OpenClaw's gateway connect could skip device identity checks when auth.token was present but not yet validated CVE-2026-28472 CVSS 9.3 Critical
openclaw< 2026.2.2 → fixed in 2026.2.2 - Nextcloud Talk allowlist bypass via actor.name display name spoofing CVE-2026-28474 CVSS 9.3 Critical
@openclaw/nextcloud-talk<= 2026.2.2 → fixed in 2026.2.6 - OpenClaw has a potential access-group authorization bypass if channel type lookup fails CVE-2026-28454 CVSS 9.1 Critical
openclaw< 2026.2.1 → fixed in 2026.2.1 - OpenClaw has an inbound allowlist policy bypass in voice-call extension (empty caller ID + suffix matching) CVE-2026-28446 CVSS 9.2 Critical
openclaw< 2026.2.2 → fixed in 2026.2.2 - set-in Affected by Prototype Pollution CVE-2026-26021 CVSS 9.4 Critical
set-in>= 2.0.1, < 2.0.5 → fixed in 2.0.5 - CASL Ability is Vulnerable to Prototype Pollution CVE-2026-1774 CVSS 9.8 Critical
@casl/ability>= 2.4.0, <= 6.7.4 → fixed in 6.7.5 - @nyariv/sandboxjs has host prototype pollution from sandbox via array intermediary (sandbox escape) CVE-2026-25881 CVSS 9.0 Critical
@nyariv/sandboxjs<= 0.8.30 → fixed in 0.8.31 - FUXA Unauthenticated Remote Code Execution in Node-RED Integration CVE-2026-25938 CVSS 9.5 Critical
fuxa-server>= 1.2.8, < 1.2.11 → fixed in 1.2.11 - FUXA Unauthenticated Remote Arbitrary Scheduler Write CVE-2026-25939 CVSS 9.3 Critical
fuxa-server>= 1.2.8, < 1.2.11 → fixed in 1.2.11 - @payloadcms/drizzle has SQL Injection in JSON/RichText Queries on PostgreSQL/SQLite Adapters CVE-2026-25544 CVSS 9.8 Critical
@payloadcms/drizzle< 3.73.0 → fixed in 3.73.0 - @nyariv/sandboxjs has Sandbox Escape via Prototype Whitelist Bypass and Host Prototype Pollution CVE-2026-25586 CVSS 10.0 Critical
@nyariv/sandboxjs<= 0.8.28 → fixed in 0.8.29 - @nyariv/sandboxjs vulnerable to sandbox escape via TOCTOU bug on keys in property accesses CVE-2026-25641 CVSS 10.0 Critical
@nyariv/sandboxjs<= 0.8.28 → fixed in 0.8.29 - @nyariv/sandboxjs has a Sandbox Escape vulnerability CVE-2026-25587 CVSS 10.0 Critical
@nyariv/sandboxjs<= 0.8.28 → fixed in 0.8.29 - @nyariv/sandboxjs has a Sandbox Escape issue CVE-2026-25520 CVSS 10.0 Critical
@nyariv/sandboxjs<= 0.8.28 → fixed in 0.8.29 - FUXA Unauthenticated Remote Code Execution via Admin JWT Minting CVE-2026-25893 CVSS 10.0 Critical
fuxa-server<= 1.2.9 → fixed in 1.2.10 - n8n Merge Node has Arbitrary File Write leading to RCE CVE-2026-25056 CVSS 9.4 Critical
n8n< 1.118.0 → fixed in 1.118.0;n8n>= 2.0.0, < 2.4.0 → fixed in 2.4.0 - survey-pdf Upgraded jsPDF Version Due to Security Vulnerability CVE-2026-25630 CVSS 9.2 Critical
survey-pdf<= 1.12.58 → fixed in 1.12.59;survey-pdf>= 2.0.0, <= 2.5.4 → fixed in 2.5.5 - FUXA Unauthenticated Remote Arbitrary Device Tag Write CVE-2026-25752 CVSS 9.3 Critical
fuxa-server<= 1.2.9 → fixed in 1.2.10 - n8n's Improper File Access Controls Allow Arbitrary File Read by Authenticated Users CVE-2026-25052 CVSS 9.4 Critical
n8n>= 2.0.0, < 2.5.0 → fixed in 2.5.0;n8n< 1.123.18 → fixed in 1.123.18 - FUXA Unauthenticated Exposure of Plaintext Database Credentials CVE-2026-25751 CVSS 9.1 Critical
fuxa-server<= 1.2.9 → fixed in 1.2.10 - n8n has OS Command Injection in Git Node CVE-2026-25053 CVSS 9.4 Critical
n8n>= 2.0.0, < 2.5.0 → fixed in 2.5.0;n8n< 1.123.10 → fixed in 1.123.10 - FUXA Unauthenticated Remote Code Execution via Arbitrary File Write in Upload API CVE-2026-25895 CVSS 9.5 Critical
fuxa-server<= 1.2.9 → fixed in 1.2.10 - n8n has a Python sandbox escape CVE-2026-25115 CVSS 9.4 Critical
n8n< 2.4.8 → fixed in 2.4.8 - n8n Vulnerable to Command Injection in Community Package Installation CVE-2026-21893 CVSS 9.4 Critical
n8n>= 0.187.0, < 1.120.3 → fixed in 1.120.3 - n8n Has Expression Escape Vulnerability Leading to RCE CVE-2026-25049 CVSS 9.4 Critical
n8n< 1.123.17 → fixed in 1.123.17;n8n>= 2.0.0, < 2.5.2 → fixed in 2.5.2 - FUXA Unauthenticated Remote Code Execution via Hardcoded JWT Secret in Default Configuration CVE-2026-25894 CVSS 9.5 Critical
fuxa-server<= 1.2.9 → fixed in 1.2.10 - Prototype Pollution via FormData Processing in Qwik City CVE-2026-25150 CVSS 9.3 Critical
@builder.io/qwik-city< 1.19.0 → fixed in 1.19.0 - locutus is vulnerable to Prototype Pollution CVE-2026-25521 CVSS 9.4 Critical
locutus>= 2.0.12, < 2.0.39 → fixed in 2.0.39 - Signal K set-system-time plugin vulnerable to RCE - Command Injection CVE-2026-23515 CVSS 9.9 Critical
@signalk/set-system-time< 1.5.0 → fixed in 1.5.0 - SandboxJS Vulnerable to Prototype Pollution -> Sandbox Escape -> RCE CVE-2026-25142 CVSS 10.0 Critical
@nyariv/sandboxjs<= 0.8.26 → fixed in 0.8.27 - Orval has Code Injection via unsanitized x-enum-descriptions using JS comments CVE-2026-25141 CVSS 9.3 Critical
@orval/core>= 7.19.0, < 7.21.0 → fixed in 7.21.0;@orval/core>= 8.0.0, < 8.2.0 → fixed in 8.2.0 - deepHas vulnerable to Prototype Pollution via constructor.prototype CVE-2026-25047 CVSS 9.4 Critical
deephas< 1.0.8 → fixed in 1.0.8 - SandboxJS has Sandbox Escape via Unprotected AsyncFunction Constructor CVE-2026-23830 CVSS 10.0 Critical
@nyariv/sandboxjs< 0.8.26 → fixed in 0.8.26 - n8n Unsafe Workflow Expression Evaluation Allows Remote Code Execution CVE-2026-1470 CVSS 9.9 Critical
n8n< 1.123.17 → fixed in 1.123.17;n8n>= 2.0.0, < 2.4.5 → fixed in 2.4.5;n8n>= 2.5.0, < 2.5.1 → fixed in 2.5.1 - Saltcorn's Reflected XSS and Command Injection vulnerabilities can be chained for 1-click-RCE GHSA-cr3w-cw5w-h3fj CVSS 9.6 Critical
@saltcorn/server>= 1.1.1, < 1.5.0-beta.19 → fixed in 1.5.0-beta.19 - vm2 has a Sandbox Escape CVE-2026-22709 CVSS 9.8 Critical
vm2<= 3.10.1 → fixed in 3.10.2 - dcap-qvl has Missing Verification for QE Identity CVE-2026-22696 CVSS 9.3 Critical
dcap-qvl< 0.3.9 → fixed in 0.3.9;@phala/dcap-qvl<= 0.3.0 → fixed in 0.3.9;@phala/dcap-qvl-web<= 0.3.3 → no fix listed; +2 more packages - sm-crypto Affected by Private Key Recovery in SM2-PKE CVE-2026-23966 CVSS 9.1 Critical
sm-crypto< 0.3.14 → fixed in 0.3.14 - Orval has a code injection via unsanitized x-enum-descriptions in enum generation CVE-2026-23947 CVSS 9.3 Critical
@orval/core>= 8.0.0-rc.0, < 8.0.2 → fixed in 8.0.2;@orval/core< 7.19.0 → fixed in 7.19.0 - Lobe Chat affected by Cross-Site Scripting(XSS) that can escalate to Remote Code Execution(RCE) CVE-2026-23733 CVSS 9.6 Critical
@lobehub/chat<= 1.143.2 → no fix listed - REC in MCPJam inspector due to HTTP Endpoint exposes CVE-2026-23744 CVSS 9.8 Critical
@mcpjam/inspector<= 1.4.2 → fixed in 1.4.3 - enclave-vm Vulnerable to Sandbox Escape via Host Error Prototype Chain CVE-2026-22686 CVSS 10.0 Critical
enclave-vm< 2.7.0 → fixed in 2.7.0 - orval MCP client is vulnerable to a code injection attack. CVE-2026-22785 CVSS 9.3 Critical
@orval/mcp< 7.18.0 → fixed in 7.18.0 - Malicious website can execute commands on the local system through XSS in the OpenCode web UI CVE-2026-22813 CVSS 9.4 Critical
opencode-ai< 1.1.10 → fixed in 1.1.10 - React Router has Path Traversal in File Session Storage CVE-2025-61686 CVSS 9.1 Critical
@react-router/node>= 7.0.0, <= 7.9.3 → fixed in 7.9.4;@remix-run/node<= 2.17.1 → fixed in 2.17.2;@remix-run/deno<= 2.17.1 → fixed in 2.17.2 - n8n Vulnerable to Unauthenticated File Access via Improper Webhook Request Handling CVE-2026-21858 CVSS 10.0 Critical
n8n>= 1.65.0, < 1.121.0 → fixed in 1.121.0 - n8n Vulnerable to RCE via Arbitrary File Write CVE-2026-21877 CVSS 9.9 Critical
n8n>= 0.123.0, < 1.121.3 → fixed in 1.121.3 - jsPDF has Local File Inclusion/Path Traversal vulnerability CVE-2025-68428 CVSS 9.2 Critical
jspdf<= 3.0.4 → fixed in 4.0.0 - Signal K Server has Unauthenticated State Pollution leading to Remote Code Execution (RCE) CVE-2025-66398 CVSS 9.6 Critical
signalk-server< 2.19.0 → fixed in 2.19.0 - AdonisJS Path Traversal in Multipart File Handling CVE-2026-21440 CVSS 9.2 Critical
@adonisjs/bodyparser< 10.1.2 → fixed in 10.1.2;@adonisjs/bodyparser>= 11.0.0-next.0, < 11.0.0-next.6 → fixed in 11.0.0-next.6 - Signal K Server vulnerable to JWT Token Theft via WebSocket Enumeration and Unauthenticated Polling CVE-2025-68620 CVSS 9.1 Critical
signalk-server< 2.19.0 → fixed in 2.19.0 - apidoc-core has a prototype pollution vulnerability CVE-2025-13158 CVSS 9.3 Critical
apidoc-core>= 0.2.0, <= 0.15.0 → no fix listed - n8n Vulnerable to Arbitrary Command Execution in Pyodide based Python Code Node CVE-2025-68668 CVSS 9.9 Critical
n8n>= 1.0.0, < 2.0.0 → fixed in 2.0.0 - n8n Vulnerable to Remote Code Execution via Expression Injection CVE-2025-68613 CVSS 9.9 Critical
n8n>= 0.211.0, < 1.120.4 → fixed in 1.120.4;n8n>= 1.121.0, < 1.121.1 → fixed in 1.121.1 - Elysia vulnerable to prototype pollution with multiple standalone schema validation CVE-2025-66456 CVSS 9.1 Critical
elysia>= 1.4.0, < 1.4.17 → fixed in 1.4.17 - n8n vulnerable to Remote Code Execution via Git Node Custom Pre-Commit Hook CVE-2025-65964 CVSS 9.4 Critical
n8n>= 0.123.1, < 1.119.2 → fixed in 1.119.2 - @vitejs/plugin-rsc Remote Code Execution through unsafe dynamic imports in RSC server function APIs on development server CVE-2025-67489 CVSS 9.8 Critical
@vitejs/plugin-rsc<= 0.5.5 → fixed in 0.5.6 - React Server Components are Vulnerable to RCE CVE-2025-55182 CVSS 10.0 Critical
react-server-dom-webpack>= 19.1.0, < 19.1.2 → fixed in 19.1.2;react-server-dom-webpack= 19.2.0 → fixed in 19.2.1;react-server-dom-turbopack>= 19.1.0, < 19.1.2 → fixed in 19.1.2; +6 more packages - React Server Components are Vulnerable to RCE GHSA-fmh4-wr37-44fp CVSS 10.0 Critical
@vitejs/plugin-rsc<= 0.5.2 → fixed in 0.5.3 - Next.js is vulnerable to RCE in React flight protocol GHSA-9qr9-h5gf-34mp CVSS 10.0 Critical
next>= 14.3.0-canary.77, < 15.0.5 → fixed in 15.0.5;next>= 15.2.0-canary.0, < 15.2.6 → fixed in 15.2.6;next>= 15.3.0-canary.0, < 15.3.6 → fixed in 15.3.6; +4 more packages - MCP Watch has a Critical Command Injection in cloneRepo allows Remote Code Execution (RCE) via malicious URL CVE-2025-66401 CVSS 9.8 Critical
mcp-watch<= 0.1.2 → no fix listed - @hpke/core reuses AEAD nonces CVE-2025-64767 CVSS 9.1 Critical
@hpke/core<= 1.7.4 → fixed in 1.7.5 - md-to-pdf vulnerable to arbitrary JavaScript code execution when parsing front matter CVE-2025-65108 CVSS 10.0 Critical
md-to-pdf< 5.2.5 → fixed in 5.2.5 - @react-native-community/cli has arbitrary OS command injection CVE-2025-11953 CVSS 9.8 Critical
@react-native-community/cli>= 20.0.0-alpha.0, < 20.0.0 → fixed in 20.0.0;@react-native-community/cli>= 19.0.0-alpha.0, < 19.1.2 → fixed in 19.1.2;@react-native-community/cli>= 18.0.0, < 18.0.1 → fixed in 18.0.1; +3 more packages - happy-dom's `--disallow-code-generation-from-strings` is not sufficient for isolating untrusted JavaScript CVE-2025-62410 CVSS 9.4 Critical
happy-dom>= 19.0.0, < 20.0.2 → fixed in 20.0.2 - Happy DOM: VM Context Escape can lead to Remote Code Execution CVE-2025-61927 CVSS 9.3 Critical
happy-dom< 20.0.0 → fixed in 20.0.0 - Flowise is vulnerable to arbitrary file write through its WriteFileTool CVE-2025-61913 CVSS 9.9 Critical
flowise< 3.0.8 → fixed in 3.0.8;flowise-components< 3.0.8 → fixed in 3.0.8;Flowise<= 3.0.5 → fixed in 3.0.8 - Flowise vulnerable to RCE via Dynamic function constructor injection CVE-2025-55346 CVSS 9.8 Critical
flowise<= 2.2.7-patch.1 → no fix listed - SillyTavern Web Interface Vulnerable DNS Rebinding CVE-2025-59159 CVSS 9.6 Critical
sillytavern< 1.13.4 → fixed in 1.13.4 - Flowise is vulnerable to stored XSS via "View Messages" allows credential theft in FlowiseAI admin panel CVE-2025-50538 CVSS 9.3 Critical
flowise< 3.0.8 → fixed in 3.0.8 - check-branches is vulnerable to command Injection CVE-2025-11148 CVSS 9.3 Critical
check-branches<= 0.0.19 → no fix listed - get-jwks: poisoned JWKS cache allows post-fetch issuer validation bypass CVE-2025-59936 CVSS 9.4 Critical
get-jwks<= 11.0.1 → fixed in 11.0.2 - cors-anywhere vulnerable to server-side request forgery CVE-2020-36851 CVSS 9.0 Critical
cors-anywhere<= 0.4.4 → no fix listed - Command Injection in adb-mcp MCP Server CVE-2025-59834 CVSS 9.8 Critical
adb-mcp<= 0.1.0 → no fix listed - Flowise has arbitrary file access due to missing chat flow id validation GHSA-q67q-549q-p849 CVSS 9.8 Critical
flowise>= 2.2.8, < 3.0.6 → fixed in 3.0.6