---
title: "Critical npm advisories"
url: https://erroneo.us/security/ecosystem/npm/
description: "All 499 critical GitHub-reviewed npm security advisories since October 2023, newest first, with vulnerable ranges and fixed versions."
type: ecosystem
section: "Security Digest"
date_modified: 2026-10-21
publisher: erroneo.us
author: erroneo.us Security Desk
license: All rights reserved. Quote with attribution and a link.
---

# Critical npm advisories

- 2026-10-21 [CVE-2026-114125](https://erroneo.us/security/cve/CVE-2026-114125/index.md) Storybook: Missing origin validation in Storybook preview allows code injection from malicious websites — storybook >= 8.0.0, < 8.6.19 → 8.6.19; storybook >= 9.0.0, < 9.1.21 → 9.1.21; storybook >= 10.0.0, < 10.6.2 → 10.6.2
- 2026-10-15 [CVE-2026-102989](https://erroneo.us/security/cve/CVE-2026-102989/index.md) TanStack Router: Unauthenticated reflected XSS in TanStack Start server-function responses — @tanstack/start-server-core >= 1.143.12, < 1.169.39 → 1.169.39; @tanstack/react-start >= 1.143.12, < 1.168.60 → 1.168.60; @tanstack/solid-start >= 1.143.12, < 1.168.57 → 1.168.57
- 2026-10-09 [CVE-2026-108261](https://erroneo.us/security/cve/CVE-2026-108261/index.md) TinaCMS admin preview iframe loads an attacker-controlled origin from the URL fragment — tinacms <= 3.13.0 → 3.14.0; @tinacms/app <= 2.5.13 → 2.5.14
- 2026-10-08 [CVE-2026-107722](https://erroneo.us/security/cve/CVE-2026-107722/index.md) fast-jwt: Incomplete patch of CVE-2026-34950: Non-whitespace key-prefix re-enables RSA→HS256 algorithm confusion — fast-jwt >= 6.2.0, <= 6.2.4 → 6.3.0
- 2026-10-08 [CVE-2026-106445](https://erroneo.us/security/cve/CVE-2026-106445/index.md) Handlebars: JavaScript Injection via Own Property Check Bypass — handlebars >= 3.0.0, <= 4.7.9 → 4.7.10
- 2026-10-08 [CVE-2026-106446](https://erroneo.us/security/cve/CVE-2026-106446/index.md) Handlebars: JavaScript Injection via AST Type Confusion in compile (bypass of CVE-2026-33937) — handlebars >= 4.0.0, <= 4.7.9 → 4.7.10
- 2026-10-07 [CVE-2026-73487](https://erroneo.us/security/cve/CVE-2026-73487/index.md) Flowise Prompt Injection to RCE and SSRF via CSV/Airtable Agent Python Validator Bypass — flowise <= 3.1.2 → 3.1.3; flowise-components <= 3.1.2 → 3.1.3
- 2026-10-07 [CVE-2026-105857](https://erroneo.us/security/cve/CVE-2026-105857/index.md) Payload Form Builder has an RCE issue — @payloadcms/plugin-form-builder < 3.90.0 → 3.90.0; @payloadcms/plugin-form-builder >= 4.0.0-canary.0, < 4.0.0-canary.34 → 4.0.0-canary.34
- 2026-10-07 [CVE-2026-106102](https://erroneo.us/security/cve/CVE-2026-106102/index.md) Quasar Framework: Stored/Reflected XSS via unescaped SSR meta tag rendering in getHead() — quasar < 2.22.0 → 2.22.0
- 2026-10-07 [CVE-2026-93605](https://erroneo.us/security/cve/CVE-2026-93605/index.md) vm2 contains a sandbox escape vulnerability — vm2 <= 3.12.0 → 3.12.1
- 2026-10-07 [CVE-2026-106501](https://erroneo.us/security/cve/CVE-2026-106501/index.md) Backstage: Sensitive information exposure in Scaffolder — @backstage/plugin-scaffolder-backend < 3.3.1 → 3.3.1; @backstage/plugin-scaffolder-backend >= 3.4.0, < 3.4.1 → 3.4.1; @backstage/plugin-scaffolder-backend >= 4.0.0, < 4.0.3 → 4.0.3
- 2026-10-07 [CVE-2026-105859](https://erroneo.us/security/cve/CVE-2026-105859/index.md) Payload: Unauthorized update to collection documents — payload < 3.90.0 → 3.90.0; payload >= 4.0.0-canary.0, < 4.0.0-canary.34 → 4.0.0-canary.34
- 2026-10-07 [CVE-2026-73483](https://erroneo.us/security/cve/CVE-2026-73483/index.md) Flowise NodeVM sandbox escape via puppeteer allowlist - authenticated RCE and arbitrary file read via Chromium — flowise <= 3.1.2 → 3.1.3; flowise-components <= 3.1.2 → 3.1.3
- 2026-10-07 [CVE-2026-105863](https://erroneo.us/security/cve/CVE-2026-105863/index.md) Payload authentication token field handling issue — payload >= 3.0.0, < 3.90.0 → 3.90.0; payload >= 4.0.0-canary.0, < 4.0.0-canary.34 → 4.0.0-canary.34
- 2026-10-06 [CVE-2026-105851](https://erroneo.us/security/cve/CVE-2026-105851/index.md) Payload: Field access control bypass on auth collections — payload > 3.0.0, < 3.90.0 → 3.90.0; payload > 4.0.0-canary.0, < 4.0.0-canary.34 → 4.0.0-canary.34
- 2026-10-06 [CVE-2026-105845](https://erroneo.us/security/cve/CVE-2026-105845/index.md) Payload: SQL Injection in SQLite and Postgres — payload >= 3.0.0, < 3.88.0 → 3.88.0; payload >= 4.0.0-canary.0, < 4.0.0-canary.27 → 4.0.0-canary.27
- 2026-10-06 [CVE-2026-105844](https://erroneo.us/security/cve/CVE-2026-105844/index.md) Payload: Prototype pollution in Payload Import Export plugin — @payloadcms/plugin-import-export >= 3.0.0, < 3.88.0 → 3.88.0; @payloadcms/plugin-import-export >= 4.0.0-canary.0, < 4.0.0-canary.27 → 4.0.0-canary.27
- 2026-10-06 [CVE-2026-102422](https://erroneo.us/security/cve/CVE-2026-102422/index.md) shell-quote: `quote()` command injection via a line terminator in a token after a `{ comment }` token — shell-quote >= 1.8.4, < 1.11.0 → 1.11.0
- 2026-10-05 [CVE-2026-92934](https://erroneo.us/security/cve/CVE-2026-92934/index.md) vm2 sandbox escape to host RCE via revisited host-wrapped AggregateError bypassing Error sanitization cycle short-circuit — vm2 <= 3.11.7 → 3.11.8
- 2026-10-05 [CVE-2026-102828](https://erroneo.us/security/cve/CVE-2026-102828/index.md) simple-git unsafe-operation guard does not block trailer command configuration — simple-git >= 3.15.0, < 4.0.1 → 4.0.1
- 2026-10-05 [CVE-2026-92956](https://erroneo.us/security/cve/CVE-2026-92956/index.md) vm2 sandbox escape via WebAssembly.compileStreaming Promise species bypass — vm2 >= 3.10.1, <= 3.11.6 → 3.11.7
- 2026-10-05 [CVE-2026-102829](https://erroneo.us/security/cve/CVE-2026-102829/index.md) simple-git: `VISUAL` editor environment variable is omitted from unsafe editor detection — @simple-git/argv-parser < 2.0.1 → 2.0.1
- 2026-10-05 [CVE-2026-103922](https://erroneo.us/security/cve/CVE-2026-103922/index.md) Capacitor Android and iOS: remote content can be loaded at the app origin via the internal HTTP proxy path — @capacitor/android >= 6.0.0, < 6.2.2 → 6.2.2; @capacitor/android >= 7.0.0, < 7.6.9 → 7.6.9; @capacitor/ios >= 6.0.0, < 6.2.2 → 6.2.2
- 2026-10-05 [CVE-2026-104846](https://erroneo.us/security/cve/CVE-2026-104846/index.md) Seroval: `fromJSON()` Promise thenable assimilation invokes plugin-produced callables (bypass of GHSA-mv8w-475r-vwqw) — seroval >= 0.12.0, <= 1.6.0 → 1.6.2
- 2026-10-05 [CVE-2026-90711](https://erroneo.us/security/cve/CVE-2026-90711/index.md) proxy-addr vulnerable to IP spoofing via IPv4-mapped IPv6 trust subnet — proxy-addr >= 1.1.0, < 2.0.8 → 2.0.8
- 2026-10-05 [CVE-2026-92946](https://erroneo.us/security/cve/CVE-2026-92946/index.md) vm2: NodeVM `require.external` without an explicit `require.root` grants unrestricted host filesystem access and full RCE — vm2 <= 3.11.6 → 3.11.7
- 2026-10-05 [CVE-2026-92954](https://erroneo.us/security/cve/CVE-2026-92954/index.md) vm2: Host-returned Promise rejection can bypass vm2's unhandled-rejection hardening and terminate the host process — vm2 >= 3.10.0, <= 3.11.7 → 3.11.8
- 2026-10-05 [CVE-2026-92947](https://erroneo.us/security/cve/CVE-2026-92947/index.md) vm2: Sandboxed code can read and write host-realm memory via Node's shared Buffer pool — vm2 <= 3.11.6 → 3.11.7
- 2026-10-05 [CVE-2026-92955](https://erroneo.us/security/cve/CVE-2026-92955/index.md) vm2: Sandbox Escape (NodeVM) — vm2 <= 3.11.7 → 3.11.8
- 2026-10-05 [CVE-2026-104849](https://erroneo.us/security/cve/CVE-2026-104849/index.md) Tinypool: Prototype Pollution Gadget to RCE in run() options — tinypool < 2.1.2 → 2.1.2
- 2026-10-05 [CVE-2026-100721](https://erroneo.us/security/cve/CVE-2026-100721/index.md) vm2: NodeVM custom resolution bypasses external path boundaries — vm2 <= 3.12.1 → 3.12.2
- 2026-10-05 [CVE-2026-104848](https://erroneo.us/security/cve/CVE-2026-104848/index.md) Tinypool: Prototype Pollution gadget in worker options leads to Remote Code Execution — tinypool <= 2.1.0 → 2.1.1
- 2026-10-05 [CVE-2026-92953](https://erroneo.us/security/cve/CVE-2026-92953/index.md) vm2: Default VM can mutate host TypedArray and ArrayBuffer intrinsics after the host-prototype pollution fix — vm2 >= 3.11.0, <= 3.11.7 → 3.11.8
- 2026-10-02 [GHSA-gg6r-gp4c-89hp](https://erroneo.us/security/ghsa/GHSA-gg6r-gp4c-89hp/index.md) Trigger.dev: V1 coordinator default-secret unauth Socket.IO — trigger.dev < 4.5.4 → 4.5.4
- 2026-10-02 [CVE-2026-10032](https://erroneo.us/security/cve/CVE-2026-10032/index.md) @a2ui/web_core: `openUrl` permits `javascript:` URI execution via agent-supplied button actions — @a2ui/web_core >= 0.9.0, < 0.10.2 → 0.10.2
- 2026-10-01 [CVE-2026-92948](https://erroneo.us/security/cve/CVE-2026-92948/index.md) vm2: NodeVM builtin allowlist bypass via node:test.run() execArgv allows sandbox escape — vm2 >= 3.9.6, <= 3.11.6 → 3.11.7
- 2026-10-01 [CVE-2026-92940](https://erroneo.us/security/cve/CVE-2026-92940/index.md) vm2 exposes host HTTPS credentials and TLS traffic through globalAgent — vm2 >= 3.11.3, <= 3.11.6 → 3.11.7
- 2026-10-01 [CVE-2026-92951](https://erroneo.us/security/cve/CVE-2026-92951/index.md) vm2 Custom Module Resolver Can Bypass the External Package Allowlist by Loading a Colliding Host Package — vm2 <= 3.11.6 → 3.11.7
- 2026-10-01 [CVE-2026-92941](https://erroneo.us/security/cve/CVE-2026-92941/index.md) vm2 NodeVM can replace the host process TLS trust store — vm2 >= 3.11.3, <= 3.11.6 → 3.11.7
- 2026-10-01 [CVE-2026-92935](https://erroneo.us/security/cve/CVE-2026-92935/index.md) vm2: NodeVM nesting guard accepts array-shaped require and permits host RCE — vm2 >= 3.11.4, <= 3.11.6 → 3.11.7
- 2026-10-01 [CVE-2026-92957](https://erroneo.us/security/cve/CVE-2026-92957/index.md) vm2: NodeVM node:-prefixed negative builtin deny bypass exposes child_process — vm2 <= 3.11.6 → 3.11.7
- 2026-10-01 [CVE-2026-92938](https://erroneo.us/security/cve/CVE-2026-92938/index.md) vm2 allows a sandboxed plugin to execute native code through `node:sqlite` — vm2 >= 3.11.3, <= 3.11.6 → 3.11.7
- 2026-10-01 [CVE-2026-102992](https://erroneo.us/security/cve/CVE-2026-102992/index.md) piscina: Prototype-pollution gadget in ThreadPool.options allows RCE via execArgv / loadBalancer / env — piscina >= 5.0.0, < 5.3.2 → 5.3.2; piscina < 4.9.4 → 4.9.4; piscina >= 6.0.0-rc.1, < 6.0.0-rc.5 → 6.0.0-rc.5
- 2026-10-01 [CVE-2026-92937](https://erroneo.us/security/cve/CVE-2026-92937/index.md) vm2: GHSA-m283-3h24-438v fix bypass leads to host RCE via call/apply indirection — vm2 = 3.11.6 → 3.11.7
- 2026-10-01 [CVE-2026-92939](https://erroneo.us/security/cve/CVE-2026-92939/index.md) vm2 crypto builtin loads attacker native code through setEngine — vm2 >= 3.11.3, <= 3.11.6 → 3.11.7
- 2026-10-01 [CVE-2026-92944](https://erroneo.us/security/cve/CVE-2026-92944/index.md) vm2 sandbox escape on Node.js 26 through a stale PromiseThenLookupChain protector — vm2 >= 3.10.2, <= 3.11.6 → 3.11.7
- 2026-09-30 [GHSA-vcvr-r3jv-pc5j](https://erroneo.us/security/ghsa/GHSA-vcvr-r3jv-pc5j/index.md) Next.js: Remote Code Execution in next/og ImageResponse — next >= 16.2.0, < 16.3.6 → 16.3.6
- 2026-09-29 [CVE-2026-101894](https://erroneo.us/security/cve/CVE-2026-101894/index.md) @xhmikosr/decompress: Path traversal via symlink chain — @xhmikosr/decompress >= 11.0.0, <= 11.1.3 → 11.1.4; @xhmikosr/decompress <= 10.2.1 → 10.2.2; decompress <= 4.2.1 → no fix
- 2026-09-24 [CVE-2026-61742](https://erroneo.us/security/cve/CVE-2026-61742/index.md) DBHub HTTP transport DNS rebinding allows unauthenticated browser-origin SQL execution — @bytebase/dbhub <= 0.22.4 → 0.22.5
- 2026-09-24 [CVE-2026-59167](https://erroneo.us/security/cve/CVE-2026-59167/index.md) SunEditor: Critical XSS vulnerability - sanitizer bypass — suneditor <= 2.47.10 → 2.47.11
- 2026-09-17 [CVE-2026-63472](https://erroneo.us/security/cve/CVE-2026-63472/index.md) Vendure affected by external-authentication account takeover: external login linked to a pre-existing account by email without verification — @vendure/core < 3.7.0 → 3.7.0
- 2026-09-16 [CVE-2026-61560](https://erroneo.us/security/cve/CVE-2026-61560/index.md) @zereight/mcp-gitlab: Unauthenticated arbitrary file read via `upload_markdown` enables PAT exfiltration and full account takeover — @zereight/mcp-gitlab < 2.1.27 → 2.1.27
- 2026-09-15 [CVE-2026-61568](https://erroneo.us/security/cve/CVE-2026-61568/index.md) @zereight/mcp-gitlab: DNS rebinding reaches local Streamable HTTP MCP transport — @zereight/mcp-gitlab < 2.1.30 → 2.1.30
- 2026-09-15 [CVE-2026-61559](https://erroneo.us/security/cve/CVE-2026-61559/index.md) @zereight/mcp-gitlab Vulnerable to Server-Side Request Forgery — @zereight/mcp-gitlab >= 0.0.1, < 2.1.27 → 2.1.27
- 2026-09-11 [CVE-2026-61534](https://erroneo.us/security/cve/CVE-2026-61534/index.md) yayson: Prototype pollution in Store/LegacyStore deserialization — yayson <= 4.2.0 → 4.3.0
- 2026-09-10 [CVE-2026-88062](https://erroneo.us/security/cve/CVE-2026-88062/index.md) OmniRoute ACP Custom-Agent Remote Code Execution (RCE) — omniroute <= 3.8.50 → no fix
- 2026-09-08 [CVE-2026-75604](https://erroneo.us/security/cve/CVE-2026-75604/index.md) Next.js: Unauthenticated Remote Code Execution on windows-hosted servers — next >= 13.4.0, < 15.5.24 → 15.5.24; next >= 16.0.0, < 16.3.3 → 16.3.3
- 2026-09-08 [CVE-2026-85061](https://erroneo.us/security/cve/CVE-2026-85061/index.md) MapLibre GL JS: XSS Sanitizer Bypass in DOM.sanitize() via Live NamedNodeMap Removal Skip — maplibre-gl <= 6.4.0 → 6.4.1
- 2026-09-08 [CVE-2026-82533](https://erroneo.us/security/cve/CVE-2026-82533/index.md) DeepSeek Harness contains an authentication bypass vulnerability in local HTTP control-plane API — @deepseek-ai/dsh-client-connection < 0.1.2-alpha.1 → 0.1.2-alpha.1
- 2026-09-08 [GHSA-2xp9-vwfh-vxw4](https://erroneo.us/security/ghsa/GHSA-2xp9-vwfh-vxw4/index.md) Next.js: Unauthenticated Remote Code Execution in Image Optimization API when AVIF files are used — next >= 10.0.0, < 15.5.24 → 15.5.24; next >= 16.0.0, < 16.3.3 → 16.3.3
- 2026-09-08 [GHSA-26w7-cxv4-gfx2](https://erroneo.us/security/ghsa/GHSA-26w7-cxv4-gfx2/index.md) Astro: Remote code execution through AVIF image optimization — astro < 7.2.8 → 7.2.8
- 2026-09-07 [CVE-2026-76969](https://erroneo.us/security/cve/CVE-2026-76969/index.md) @sap/cds-mtx: Credential disclosure in multitenant applications using SAP Cloud Application Programming Model (CAP) — @sap/cds-mtxs >= 4.0.1, < 4.0.3 → 4.0.3; @sap/cds-mtxs >= 3.0.1, < 3.9.7 → 3.9.7; @sap/cds-mtxs >= 2.0.2, < 2.7.7 → 2.7.7
- 2026-09-04 [CVE-2026-75856](https://erroneo.us/security/cve/CVE-2026-75856/index.md) CodeWhale: SSRF‌ bypass - TOCTOU on DNS failure for DNS pinning — deepseek-tui >= 0.8.5, <= 0.8.41 → no fix; deepseek-tui >= 0.8.5, < 0.8.41 → 0.8.41; codewhale-tui >= 0.8.41, < 0.8.64 → 0.8.64
- 2026-09-03 [CVE-2026-72717](https://erroneo.us/security/cve/CVE-2026-72717/index.md) Orval: Import-time RCE via schema default -> zod module-level template literal — orval < 8.21.0 → 8.21.0
- 2026-09-03 [CVE-2026-62681](https://erroneo.us/security/cve/CVE-2026-62681/index.md) Orval: RCE via OpenAPI path -> unescaped request-URL template literal (backtick breakout) — orval < 8.21.0 → 8.21.0
- 2026-09-03 [CVE-2026-71871](https://erroneo.us/security/cve/CVE-2026-71871/index.md) Orval: Import-time RCE via header-parameter default -> zod module-level template literal — orval < 8.21.0 → 8.21.0
- 2026-09-03 [CVE-2026-62682](https://erroneo.us/security/cve/CVE-2026-62682/index.md) Orval: RCE via servers[].url -> unescaped request-URL template literal (with getBaseUrlFromSpecification) — orval < 8.21.0 → 8.21.0
- 2026-09-03 [CVE-2026-71865](https://erroneo.us/security/cve/CVE-2026-71865/index.md) Orval: Import-time RCE via query parameter name -> computed-property-key injection in the zod cli — orval < 8.21.0 → 8.21.0
- 2026-09-03 [CVE-2026-71864](https://erroneo.us/security/cve/CVE-2026-71864/index.md) Orval: Import-time RCE via header parameter name -> computed-property-key injection in the zod client — orval < 8.21.0 → 8.21.0
- 2026-09-03 [CVE-2026-71868](https://erroneo.us/security/cve/CVE-2026-71868/index.md) Orval: Import-time RCE via enum-typed default -> zod module-level template literal — orval < 8.21.0 → 8.21.0
- 2026-09-03 [CVE-2026-71867](https://erroneo.us/security/cve/CVE-2026-71867/index.md) Orval: RCE via schema property name -> computed-property-key injection in the MSW mock generator — orval < 8.21.0 → 8.21.0
- 2026-09-03 [CVE-2026-71869](https://erroneo.us/security/cve/CVE-2026-71869/index.md) Orval: Import-time RCE via array-items default -> zod module-level template literal — orval < 8.21.0 → 8.21.0
- 2026-09-02 [CVE-2026-72716](https://erroneo.us/security/cve/CVE-2026-72716/index.md) Orval: Import-time RCE via query-parameter default -> zod module-level template literal — orval < 8.21.0 → 8.21.0
- 2026-09-02 [CVE-2026-71866](https://erroneo.us/security/cve/CVE-2026-71866/index.md) Orval: Import-time RCE via schema property name -> computed-property-key injection in the zod client — orval < 8.21.0 → 8.21.0
- 2026-08-21 [CVE-2026-77413](https://erroneo.us/security/cve/CVE-2026-77413/index.md) JSONata: Arbitrary Code Execution via crafted JSONata expressions — jsonata <= 1.8.7 → 1.8.8; jsonata >= 2.0.0, < 2.2.0 → 2.2.0
- 2026-08-21 [CVE-2026-77415](https://erroneo.us/security/cve/CVE-2026-77415/index.md) JSONata vulnerable to Arbitrary Code Execution via crafted JSONata expressions — jsonata >= 2.0.0, < 2.2.1 → 2.2.1; jsonata < 1.8.8 → 1.8.8
- 2026-08-21 [CVE-2026-77414](https://erroneo.us/security/cve/CVE-2026-77414/index.md) JSONata vulnerable to Arbitrary Code Execution via crafted JSONata expressions — jsonata >= 2.0.0, < 2.2.1 → 2.2.1; jsonata < 1.8.8 → 1.8.8
- 2026-08-20 [CVE-2026-55445](https://erroneo.us/security/cve/CVE-2026-55445/index.md) Qinglong has an incomplete fix for CVE-2026-3965: Improper Authentication — @whyour/qinglong < 2.20.1 → 2.20.1
- 2026-08-17 [GHSA-m5w8-4gq2-6f8x](https://erroneo.us/security/ghsa/GHSA-m5w8-4gq2-6f8x/index.md) vm2: NodeVM `builtin: ['*']` exposes `os` and `dns` — process-wide observability reads AND writes that hijack the host (sibling class of GHSA-9g8x-92q2-p28f) — vm2 <= 3.11.5 → 3.11.6
- 2026-08-17 [CVE-2026-47686](https://erroneo.us/security/cve/CVE-2026-47686/index.md) VM2 has Missing Error.cause Sanitization that Enables Sandbox Escape to RCE — vm2 <= 3.11.5 → 3.11.6
- 2026-08-17 [CVE-2026-47698](https://erroneo.us/security/cve/CVE-2026-47698/index.md) vm2: Sandbox Breakout Using Dangerous Host Proto Mutators — vm2 <= 3.11.5 → 3.11.6
- 2026-08-07 [CVE-2026-71851](https://erroneo.us/security/cve/CVE-2026-71851/index.md) crypto-js: Insufficient Entropy in Cryptographic Secret Generation via Vulnerable CryptoJS Dependency Chain — crypto-js < 4.0.0 → 4.0.0
- 2026-08-05 [CVE-2026-71319](https://erroneo.us/security/cve/CVE-2026-71319/index.md) Unauthenticated Nuxt DevTools RPC allows arbitrary command execution on the developer's host — @nuxt/devtools < 3.3.1 → 3.3.1
- 2026-08-04 [CVE-2026-69256](https://erroneo.us/security/cve/CVE-2026-69256/index.md) Flowise: Remote Code Execution Vulnerability in CSVAgent — flowise-components <= 3.1.2 → 3.1.3; flowise <= 3.1.2 → 3.1.3
- 2026-08-04 [CVE-2026-69259](https://erroneo.us/security/cve/CVE-2026-69259/index.md) Flowise RCE via SQLite Record Manager Node — flowise <= 3.1.2 → 3.1.3; flowise-components <= 3.1.2 → 3.1.3
- 2026-08-04 [CVE-2026-69253](https://erroneo.us/security/cve/CVE-2026-69253/index.md) Flowise Sandbox Escape to RCE — flowise <= 3.1.2 → 3.1.3; flowise-components <= 3.1.2 → 3.1.3
- 2026-08-04 [CVE-2026-69255](https://erroneo.us/security/cve/CVE-2026-69255/index.md) Flowise: CSV Agent Remote Code Execution via Pyodide Code Injection — Root Shell Verified — flowise <= 3.1.2 → 3.1.3; flowise-components <= 3.1.2 → 3.1.3
- 2026-08-04 [CVE-2026-70478](https://erroneo.us/security/cve/CVE-2026-70478/index.md) Flowise: Unauthenticated OAuth2 token refresh endpoint returns access tokens — enables token theft for any connected service — flowise <= 3.1.2 → 3.1.3
- 2026-08-04 [CVE-2026-69251](https://erroneo.us/security/cve/CVE-2026-69251/index.md) Flowise RCE via TypeORM DataSource — flowise <= 3.1.2 → 3.1.3; flowise-components <= 3.1.2 → 3.1.3
- 2026-08-04 [CVE-2026-70477](https://erroneo.us/security/cve/CVE-2026-70477/index.md) Flowise: CSV Agent Prompt Injection Remote Code Execution Vulnerability — flowise <= 3.1.2 → 3.1.3; flowise-components <= 3.1.2 → 3.1.3
- 2026-08-04 [CVE-2026-70470](https://erroneo.us/security/cve/CVE-2026-70470/index.md) Flowise: Pyodide validator Unicode homoglyph bypass leads to RCE — flowise <= 3.1.2 → 3.1.3; flowise-components <= 3.1.2 → 3.1.3
- 2026-08-04 [CVE-2026-69264](https://erroneo.us/security/cve/CVE-2026-69264/index.md) Flowise: RCE via CSVAgent csvFile data URI base64 segment is interpolated into Python source without validation — flowise <= 3.1.2 → 3.1.3; flowise-components <= 3.1.2 → 3.1.3
- 2026-08-04 [CVE-2026-69254](https://erroneo.us/security/cve/CVE-2026-69254/index.md) Flowise: RCE via NodeVM Sandbox Escape in executeJavaScriptCode() nodeVMOptions Override — flowise <= 3.1.2 → 3.1.3; flowise-components <= 3.1.2 → 3.1.3
- 2026-08-03 [CVE-2026-69240](https://erroneo.us/security/cve/CVE-2026-69240/index.md) Sequelize: SQL Injection (Oracle DB) — sequelize < 6.37.4 → 6.37.4
- 2026-07-31 [CVE-2026-52887](https://erroneo.us/security/cve/CVE-2026-52887/index.md) NocoBase: SQL injection in /api/myInAppChannels:list filter to PG-superuser RCE — @nocobase/plugin-notification-in-app-message <= 2.0.60 → 2.0.61
- 2026-07-31 [CVE-2026-53609](https://erroneo.us/security/cve/CVE-2026-53609/index.md) Apostrophe has Server-Side Prototype Pollution in apos.util.set via patch operators that leads to process-wide authorization bypass — apostrophe <= 4.30.0 → 4.31.0
- 2026-07-30 [CVE-2025-4318](https://erroneo.us/security/cve/CVE-2025-4318/index.md) AWS Amplify Studio UI Component Properties Has an Input Validation Issue — @aws-amplify/codegen-ui-react <= 2.20.2 → 2.20.3
- 2026-07-28 [CVE-2026-54658](https://erroneo.us/security/cve/CVE-2026-54658/index.md) @hypequery/clickhouse has SQL Injection in parameter escaping that allows arbitrary SQL execution — @hypequery/clickhouse < 2.0.2 → 2.5.1
- 2026-07-24 [CVE-2026-73414](https://erroneo.us/security/cve/CVE-2026-73414/index.md) Shescape: Shell injection via unescaped parentheses on Windows with CMD — shescape < 2.1.14 → 2.1.14; shescape >= 3.0.0, < 3.0.1 → 3.0.1
- 2026-07-24 [GHSA-w28w-gp39-m4p6](https://erroneo.us/security/ghsa/GHSA-w28w-gp39-m4p6/index.md) Prompty: Server-Side Template Injection to Remote Code Execution in the @prompty/core Nunjucks Renderer — @prompty/core <= 0.1.4 → 0.1.5; @prompty/core >= 2.0.0-alpha.1, <= 2.0.0-beta.4 → 2.0.0-beta.5

Pages: https://erroneo.us/security/ecosystem/npm/index.md · https://erroneo.us/security/ecosystem/npm/2/index.md · https://erroneo.us/security/ecosystem/npm/3/index.md · https://erroneo.us/security/ecosystem/npm/4/index.md · https://erroneo.us/security/ecosystem/npm/5/index.md

---
Source page: https://erroneo.us/security/ecosystem/npm/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt