Lucene search
+L

37119 matches found

Snyk
Snyk
β€’added 2026/06/13 9:0 p.m.β€’11 views

Malicious Package

Overview @apiwizards/company-auth-sdk is a malicious package. that installs "socket io" as a remote access trojan RAT, then fetch a second-stage payload 0001.dat from the same command-and-control C2 server and execute it. The C2 is linked to FAMOUS CHOLLIMA, a North Korean DPRK group behind the...

9.8CVSS6AI score
SaveExploits0References2
Snyk
Snyk
β€’added 2026/06/13 9:0 p.m.β€’10 views

Malicious Package

Overview xnder-sdk-js is a malicious package. that installs "socket io" as a remote access trojan RAT, then fetch a second-stage payload 0001.dat from the same command-and-control C2 server and execute it. The C2 is linked to FAMOUS CHOLLIMA, a North Korean DPRK group behind the "Contagious...

9.8CVSS6AI score
SaveExploits0References2
Snyk
Snyk
β€’added 2026/06/13 9:0 p.m.β€’8 views

Malicious Package

Overview bubblesearch is a malicious package. that installs "socket io" as a remote access trojan RAT, then fetch a second-stage payload 0001.dat from the same command-and-control C2 server and execute it. The C2 is linked to FAMOUS CHOLLIMA, a North Korean DPRK group behind the "Contagious...

9.8CVSS6AI score
SaveExploits0References2
Snyk
Snyk
β€’added 2026/06/13 9:0 p.m.β€’9 views

Malicious Package

Overview bubblestring is a malicious package. that installs "socket io" as a remote access trojan RAT, then fetch a second-stage payload 0001.dat from the same command-and-control C2 server and execute it. The C2 is linked to FAMOUS CHOLLIMA, a North Korean DPRK group behind the "Contagious...

9.8CVSS6AI score
SaveExploits0References2
Snyk
Snyk
β€’added 2026/06/13 9:0 p.m.β€’10 views

Malicious Package

Overview @sql-trigger/nodesql is a malicious package. that installs "socket io" as a remote access trojan RAT, then fetch a second-stage payload 0001.dat from the same command-and-control C2 server and execute it. The C2 is linked to FAMOUS CHOLLIMA, a North Korean DPRK group behind the "Contagio...

9.8CVSS6AI score
SaveExploits0References2
Snyk
Snyk
β€’added 2026/06/13 9:0 p.m.β€’11 views

Malicious Package

Overview @sqlite-node/createsql is a malicious package. that installs "socket io" as a remote access trojan RAT, then fetch a second-stage payload 0001.dat from the same command-and-control C2 server and execute it. The C2 is linked to FAMOUS CHOLLIMA, a North Korean DPRK group behind the...

9.8CVSS6AI score
SaveExploits0References2
Snyk
Snyk
β€’added 2026/06/13 9:0 p.m.β€’5 views

Malicious Package

Overview subsearch is a malicious package. that installs "socket io" as a remote access trojan RAT, then fetch a second-stage payload 0001.dat from the same command-and-control C2 server and execute it. The C2 is linked to FAMOUS CHOLLIMA, a North Korean DPRK group behind the "Contagious Intervie...

9.8CVSS6AI score
SaveExploits0References2
Snyk
Snyk
β€’added 2026/06/13 9:0 p.m.β€’10 views

Malicious Package

Overview @apiwizards/auth-middleware is a malicious package. that installs "socket io" as a remote access trojan RAT, then fetch a second-stage payload 0001.dat from the same command-and-control C2 server and execute it. The C2 is linked to FAMOUS CHOLLIMA, a North Korean DPRK group behind the...

9.8CVSS6AI score
SaveExploits0References2
Snyk
Snyk
β€’added 2026/06/13 9:0 p.m.β€’6 views

Malicious Package

Overview @array-util/subsearch is a malicious package. that installs "socket io" as a remote access trojan RAT, then fetch a second-stage payload 0001.dat from the same command-and-control C2 server and execute it. The C2 is linked to FAMOUS CHOLLIMA, a North Korean DPRK group behind the...

9.8CVSS6AI score
SaveExploits0References2
Snyk
Snyk
β€’added 2026/06/13 9:0 p.m.β€’9 views

Malicious Package

Overview @antoncarlos1/nodelamp is a malicious package. that installs "socket io" as a remote access trojan RAT, then fetch a second-stage payload 0001.dat from the same command-and-control C2 server and execute it. The C2 is linked to FAMOUS CHOLLIMA, a North Korean DPRK group behind the...

9.8CVSS6AI score
SaveExploits0References2
Snyk
Snyk
β€’added 2026/06/13 9:0 p.m.β€’9 views

Malicious Package

Overview @array-util/nodepull is a malicious package. that installs "socket io" as a remote access trojan RAT, then fetch a second-stage payload 0001.dat from the same command-and-control C2 server and execute it. The C2 is linked to FAMOUS CHOLLIMA, a North Korean DPRK group behind the "Contagio...

9.8CVSS6AI score
SaveExploits0References2
Snyk
Snyk
β€’added 2026/06/13 9:0 p.m.β€’7 views

Malicious Package

Overview express-initial is a malicious package. that installs "socket io" as a remote access trojan RAT, then fetch a second-stage payload 0001.dat from the same command-and-control C2 server and execute it. The C2 is linked to FAMOUS CHOLLIMA, a North Korean DPRK group behind the "Contagious...

9.8CVSS6AI score
SaveExploits0References2
Snyk
Snyk
β€’added 2026/06/13 9:0 p.m.β€’14 views

Malicious Package

Overview bootstrap-utils is a malicious package. that installs "socket io" as a remote access trojan RAT, then fetch a second-stage payload 0001.dat from the same command-and-control C2 server and execute it. The C2 is linked to FAMOUS CHOLLIMA, a North Korean DPRK group behind the "Contagious...

9.8CVSS6AI score
SaveExploits0References2
Snyk
Snyk
β€’added 2026/06/13 9:0 p.m.β€’8 views

Malicious Package

Overview @node-cloud/create is a malicious package. that installs "socket io" as a remote access trojan RAT, then fetch a second-stage payload 0001.dat from the same command-and-control C2 server and execute it. The C2 is linked to FAMOUS CHOLLIMA, a North Korean DPRK group behind the "Contagious...

9.8CVSS6AI score
SaveExploits0References2
Snyk
Snyk
β€’added 2026/06/13 9:0 p.m.β€’11 views

Malicious Package

Overview @apiwizards/api-client is a malicious package. that installs "socket io" as a remote access trojan RAT, then fetch a second-stage payload 0001.dat from the same command-and-control C2 server and execute it. The C2 is linked to FAMOUS CHOLLIMA, a North Korean DPRK group behind the...

9.8CVSS6AI score
SaveExploits0References2
Snyk
Snyk
β€’added 2026/06/13 5:13 p.m.β€’6 views

UNIX Symbolic Link (Symlink) Following

Overview Affected versions of this package are vulnerable to UNIX Symbolic Link Symlink Following in setupPtmx and setupDevSymlinks, which enable file deletion via calls to os.Remove and os.Symlink. An attacker who supplies a container image whose /dev is a symlink can redirect these operations...

4.8CVSS5.5AI score0.00222EPSS
SaveExploits0References2
Snyk
Snyk
β€’added 2026/06/13 5:13 p.m.β€’6 views

UNIX Symbolic Link (Symlink) Following

Overview github.com/opencontainers/runc/libcontainer is a package for a modern container runtime. Affected versions of this package are vulnerable to UNIX Symbolic Link Symlink Following in setupPtmx and setupDevSymlinks, which enable file deletion via calls to os.Remove and os.Symlink. An attack...

4.8CVSS5.5AI score0.00222EPSS
SaveExploits0References2
Snyk
Snyk
β€’added 2026/06/13 10:6 a.m.β€’7 views

Origin Validation Error

Overview Affected versions of this package are vulnerable to Origin Validation Error in the handling of the Origin header on incoming connections. An attacker can bypass access restrictions by exploiting DNS rebinding techniques, potentially gaining unauthorized access to server resources...

9.6CVSS6AI score0.00153EPSS
SaveExploits0References2
Snyk
Snyk
β€’added 2026/06/13 10:6 a.m.β€’6 views

Origin Validation Error

Overview Affected versions of this package are vulnerable to Origin Validation Error in the handling of the Origin header on incoming connections. An attacker can bypass access restrictions by exploiting DNS rebinding techniques, potentially gaining unauthorized access to server resources...

9.6CVSS6AI score0.00153EPSS
SaveExploits0References2
Snyk
Snyk
β€’added 2026/06/13 6:7 a.m.β€’5 views

Credential Exposure

Overview Affected versions of this package are vulnerable to Credential Exposure in jsonnetfetcher.goβ€Ž that may expose the Kubernetes service account token of the Grafana Operator manager to users with sufficient privileges to create Dashboard or LibraryPanel resources. This token can be used to...

8.8CVSS5.8AI score0.00361EPSS
SaveExploits0References2
Snyk
Snyk
β€’added 2026/06/13 6:7 a.m.β€’4 views

Credential Exposure

Overview Affected versions of this package are vulnerable to Credential Exposure in jsonnetfetcher.goβ€Ž that may expose the Kubernetes service account token of the Grafana Operator manager to users with sufficient privileges to create Dashboard or LibraryPanel resources. This token can be used to...

8.8CVSS5.8AI score0.00361EPSS
SaveExploits0References2
Snyk
Snyk
β€’added 2026/06/12 11:9 p.m.β€’7 views

Missing Authorization

Overview openclaw is a 🦞 OpenClaw β€” Personal AI Assistant Affected versions of this package are vulnerable to Missing Authorization via the trusted-proxy Control UI WebSocket process. An attacker can gain unauthorized administrative privileges by connecting as an unpaired or restricted client and...

8.8CVSS5.9AI score0.00289EPSS
SaveExploits0References2
Snyk
Snyk
β€’added 2026/06/12 11:9 p.m.β€’15 views

Time-of-check Time-of-use (TOCTOU) Race Condition

Overview openclaw is a 🦞 OpenClaw β€” Personal AI Assistant Affected versions of this package are vulnerable to Time-of-check Time-of-use TOCTOU Race Condition via the shell wrapper argv. An attacker can execute unauthorized commands by modifying command arguments after allowlist approval but befor...

8.8CVSS5.5AI score0.00982EPSS
SaveExploits0References2
Snyk
Snyk
β€’added 2026/06/12 11:9 p.m.β€’14 views

Missing Authorization

Overview openclaw is a 🦞 OpenClaw β€” Personal AI Assistant Affected versions of this package are vulnerable to Missing Authorization via the bundle MCP loopback session-spawn path. An attacker can gain unauthorized access to restricted commands by bypassing intended command restrictions through...

6.9CVSS5.4AI score0.00094EPSS
SaveExploits0References2
Snyk
Snyk
β€’added 2026/06/12 11:9 p.m.β€’13 views

Time-of-check Time-of-use (TOCTOU) Race Condition

Overview openclaw is a 🦞 OpenClaw β€” Personal AI Assistant Affected versions of this package are vulnerable to Time-of-check Time-of-use TOCTOU Race Condition via the system.run safe-bin allowlist validation. An attacker can access arbitrary files and expose sensitive configuration data by injecti...

8.3CVSS5.5AI score0.00191EPSS
SaveExploits0References2
Snyk
Snyk
β€’added 2026/06/12 11:9 p.m.β€’7 views

Directory Traversal

Overview openclaw is a 🦞 OpenClaw β€” Personal AI Assistant Affected versions of this package are vulnerable to Directory Traversal via the memory-wiki ingest process when an authenticated user with operator.write scope specifies arbitrary local file paths. An attacker can access sensitive local...

7.1CVSS6.5AI score0.00375EPSS
SaveExploits0References2
Snyk
Snyk
β€’added 2026/06/12 11:9 p.m.β€’12 views

Server-side Request Forgery (SSRF)

Overview openclaw is a 🦞 OpenClaw β€” Personal AI Assistant Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the message.action forwarding. An attacker can obtain sensitive credentials by supplying malicious loopback URLs through model-controlled action...

6.5CVSS5.3AI score0.00254EPSS
SaveExploits0References2
Snyk
Snyk
β€’added 2026/06/12 11:9 p.m.β€’14 views

User Interface (UI) Misrepresentation of Critical Information

Overview openclaw is a 🦞 OpenClaw β€” Personal AI Assistant Affected versions of this package are vulnerable to User Interface UI Misrepresentation of Critical Information via the approval display truncation. An attacker can execute unauthorized operations by submitting oversized exec commands with...

8.5CVSS5.5AI score0.00232EPSS
SaveExploits0References2
Snyk
Snyk
β€’added 2026/06/12 11:8 p.m.β€’11 views

Insufficient Session Expiration

Overview openclaw is a 🦞 OpenClaw β€” Personal AI Assistant Affected versions of this package are vulnerable to Insufficient Session Expiration via the secret revocation webhook. An attacker can maintain access using previously valid webhook secrets by sending webhook events during the period after...

6.5CVSS5.3AI score0.00207EPSS
SaveExploits0References2
Snyk
Snyk
β€’added 2026/06/12 11:8 p.m.β€’8 views

Incorrect Authorization

Overview openclaw is a 🦞 OpenClaw β€” Personal AI Assistant Affected versions of this package are vulnerable to Incorrect Authorization via the native command handling process. An attacker can gain unauthorized access to privileged operations by sending crafted commands that bypass the configured...

8.8CVSS5.9AI score0.00267EPSS
SaveExploits0References2
Snyk
Snyk
β€’added 2026/06/12 11:8 p.m.β€’8 views

User Impersonation

Overview openclaw is a 🦞 OpenClaw β€” Personal AI Assistant Affected versions of this package are vulnerable to User Impersonation via improper validation of identity headers in the trusted-proxy configuration. An attacker can impersonate privileged users by supplying forged identity headers to the...

7.7CVSS5.9AI score0.00102EPSS
SaveExploits0References2
Snyk
Snyk
β€’added 2026/06/12 11:8 p.m.β€’13 views

User Impersonation

Overview openclaw is a 🦞 OpenClaw β€” Personal AI Assistant Affected versions of this package are vulnerable to User Impersonation in the allowFrom feature that relies on mutable Slack display names. An attacker can gain unauthorized access to agent privileges by modifying their Slack display name ...

8.6CVSS5.4AI score0.00209EPSS
SaveExploits0References2
Snyk
Snyk
β€’added 2026/06/12 11:8 p.m.β€’8 views

Insufficient Session Expiration

Overview @openclaw/mattermost is an OpenClaw Mattermost channel plugin Affected versions of this package are vulnerable to Insufficient Session Expiration due to a delay in the monitor refresh process. An attacker can continue to execute unauthorized commands by exploiting the acceptance of revok...

6.5CVSS6AI score0.00181EPSS
SaveExploits0References2
Snyk
Snyk
β€’added 2026/06/12 11:8 p.m.β€’8 views

Insufficient Session Expiration

Overview openclaw is a 🦞 OpenClaw β€” Personal AI Assistant Affected versions of this package are vulnerable to Insufficient Session Expiration due to a delay in the monitor refresh process. An attacker can continue to execute unauthorized commands by exploiting the acceptance of revoked slash toke...

6.5CVSS6AI score0.00181EPSS
SaveExploits0References2
Snyk
Snyk
β€’added 2026/06/12 11:8 p.m.β€’8 views

Exposure of Resource to Wrong Sphere

Overview openclaw is a 🦞 OpenClaw β€” Personal AI Assistant Affected versions of this package are vulnerable to Exposure of Resource to Wrong Sphere in the sandboxed session spawning process. An attacker can access sensitive workspace path information by initiating child sessions from sandboxed...

4.3CVSS5.9AI score0.00187EPSS
SaveExploits0References2
Snyk
Snyk
β€’added 2026/06/12 11:8 p.m.β€’7 views

Incorrect Authorization

Overview openclaw is a 🦞 OpenClaw β€” Personal AI Assistant Affected versions of this package are vulnerable to Incorrect Authorization in the dynamic-agent binding process. An attacker can modify binding states without proper authorization by sending crafted requests as an authenticated user...

4.3CVSS5.9AI score0.00166EPSS
SaveExploits0References2
Snyk
Snyk
β€’added 2026/06/12 11:8 p.m.β€’8 views

Incomplete Comparison with Missing Factors

Overview openclaw is a 🦞 OpenClaw β€” Personal AI Assistant Affected versions of this package are vulnerable to Incomplete Comparison with Missing Factors via the retry endpoint validation process. An attacker can intercept authentication material by crafting a hostname prefix that resembles a...

6.5CVSS5.9AI score0.00265EPSS
SaveExploits0References2
Snyk
Snyk
β€’added 2026/06/12 11:8 p.m.β€’12 views

Incomplete List of Disallowed Inputs

Overview openclaw is a 🦞 OpenClaw β€” Personal AI Assistant Affected versions of this package are vulnerable to Incomplete List of Disallowed Inputs via the PowerShell encoded-command handling process. An attacker can execute arbitrary commands by leveraging unrecognized encoded-command alias forms...

8.8CVSS6.2AI score0.00451EPSS
SaveExploits0References2
Snyk
Snyk
β€’added 2026/06/12 11:8 p.m.β€’8 views

Not Failing Securely ('Failing Open')

Overview openclaw is a 🦞 OpenClaw β€” Personal AI Assistant Affected versions of this package are vulnerable to Not Failing Securely 'Failing Open' in the event handler process due to missing validation of channel type metadata. An attacker can bypass intended policy decisions by sending crafted...

6.3CVSS5.9AI score0.00189EPSS
SaveExploits0References2
Snyk
Snyk
β€’added 2026/06/12 11:8 p.m.β€’8 views

Not Failing Securely ('Failing Open')

Overview @openclaw/mattermost is an OpenClaw Mattermost channel plugin Affected versions of this package are vulnerable to Not Failing Securely 'Failing Open' in the event handler process due to missing validation of channel type metadata. An attacker can bypass intended policy decisions by sendi...

6.3CVSS5.9AI score0.00189EPSS
SaveExploits0References2
Snyk
Snyk
β€’added 2026/06/12 11:6 p.m.β€’6 views

Incorrect Authorization

Overview @openclaw/qqbot is an OpenClaw QQ Bot channel plugin for group and direct-message workflows. Affected versions of this package are vulnerable to Incorrect Authorization via the pre-dispatch process in QQBot slash commands. An attacker can bypass access control policies by invoking comman...

8.2CVSS6.1AI score0.00192EPSS
SaveExploits0References2
Snyk
Snyk
β€’added 2026/06/12 11:6 p.m.β€’8 views

User Impersonation

Overview @openclaw/qqbot is an OpenClaw QQ Bot channel plugin for group and direct-message workflows. Affected versions of this package are vulnerable to User Impersonation in the QQBot streaming command. An attacker can alter configuration settings by accessing the command without meeting explic...

7.7CVSS5.9AI score0.00172EPSS
SaveExploits0References2
Snyk
Snyk
β€’added 2026/06/12 11:6 p.m.β€’8 views

Incorrect Authorization

Overview openclaw is a 🦞 OpenClaw β€” Personal AI Assistant Affected versions of this package are vulnerable to Incorrect Authorization via the pre-dispatch process in QQBot slash commands. An attacker can bypass access control policies by invoking commands before the configured allowFrom checks ar...

8.2CVSS6.1AI score0.00192EPSS
SaveExploits0References2
Snyk
Snyk
β€’added 2026/06/12 11:6 p.m.β€’12 views

User Impersonation

Overview openclaw is a 🦞 OpenClaw β€” Personal AI Assistant Affected versions of this package are vulnerable to User Impersonation in the QQBot streaming command. An attacker can alter configuration settings by accessing the command without meeting explicit allowlist entry requirements. Remediation...

7.7CVSS5.9AI score0.00172EPSS
SaveExploits0References2
Snyk
Snyk
β€’added 2026/06/12 11:6 p.m.β€’14 views

Time-of-check Time-of-use (TOCTOU) Race Condition

Overview openclaw is a 🦞 OpenClaw β€” Personal AI Assistant Affected versions of this package are vulnerable to Time-of-check Time-of-use TOCTOU Race Condition via the node pairing reconnection. An attacker can gain unauthorized node authority by exploiting logic flaws that allow restoration or...

9.8CVSS5.3AI score0.00221EPSS
SaveExploits0References2
Snyk
Snyk
β€’added 2026/06/12 10:52 p.m.β€’5 views

Incomplete List of Disallowed Inputs

Overview github.com/filebrowser/filebrowser/v2/http is a web file browser. Affected versions of this package are vulnerable to Incomplete List of Disallowed Inputs. via the ParseCommand process. An attacker can execute arbitrary operating system commands by injecting shell metacharacters into...

8.8CVSS6.3AI score0.00323EPSS
SaveExploits0References3
Snyk
Snyk
β€’added 2026/06/12 10:52 p.m.β€’6 views

Incomplete List of Disallowed Inputs

Overview Affected versions of this package are vulnerable to Incomplete List of Disallowed Inputs via the ParseCommand process. An attacker can execute arbitrary operating system commands by injecting shell metacharacters into allowed command input, which are then interpreted by the configured...

8.8CVSS6.3AI score0.00323EPSS
SaveExploits0References3
Snyk
Snyk
β€’added 2026/06/12 10:52 p.m.β€’4 views

Incomplete List of Disallowed Inputs

Overview github.com/filebrowser/filebrowser/http is a Affected versions of this package are vulnerable to Incomplete List of Disallowed Inputs. via the ParseCommand process. An attacker can execute arbitrary operating system commands by injecting shell metacharacters into allowed command input,...

8.8CVSS6.3AI score0.00323EPSS
SaveExploits0References3
Snyk
Snyk
β€’added 2026/06/12 10:52 p.m.β€’6 views

Incomplete List of Disallowed Inputs

Overview Affected versions of this package are vulnerable to Incomplete List of Disallowed Inputs via the ParseCommand process. An attacker can execute arbitrary operating system commands by injecting shell metacharacters into allowed command input, which are then interpreted by the configured...

8.8CVSS6.3AI score0.00323EPSS
SaveExploits0References3
Snyk
Snyk
β€’added 2026/06/12 10:9 p.m.β€’11 views

Cross-site Scripting (XSS)

Overview apostrophe is a content management system CMS for Node.js. It supports in-context editing, schema-driven content types, flexible widgets and a great deal more. This module contains everything necessary to build a website with ApostropheCMS. Affected versions of this package are vulnerabl...

5.4CVSS5AI score0.00286EPSS
SaveExploits0References2
Total number of security vulnerabilities37119