// vulnerability wall

What is being reported in npm packages right now

The most recent reviewed advisories from the GitHub Advisory Database, refreshed every hour. Each one says which package and versions are affected and whether a fix exists. Where the underlying mistake is one people also make in their own code, the SixthWall rule that catches it is linked. RSS feed.

Are any of these in your project?

One command checks every installed package against the same database. It reads your lockfile and sends only package names and versions to osv.dev.

npx @sixthwall/cli deps

60 advisories · 6 critical · 31 high · 23 medium · 0 low

  1. highSep 18, 2026GHSA-3753-m2x2-q623 · CVE-2026-91127

    File Viewer: DOM XSS via unsafe hyperlink schemes in the legacy DOC renderer

    • @file-viewer/doc <= 2.3.0 → update to 2.3.1
    • msdoc-viewer <= 0.2.1 → update to 0.2.2

    Same mistake in your own code? AI-XSS-001 (HTML inserted without sanitising)

  2. highSep 18, 2026GHSA-7q85-xj36-vmfc · CVE-2026-77301

    adm-zip: Uncontrolled memory allocation via the declared uncompressed size (DoS)

    • adm-zip < 0.6.1 → update to 0.6.1
  3. mediumSep 18, 2026GHSA-3rm2-h79c-8qw6 · CVE-2026-84992

    md-editor-v3: XSS via fenced-code language rendering bypass

    • md-editor-v3 <= 6.5.3 → update to 6.5.4

    Same mistake in your own code? AI-XSS-001 (HTML inserted without sanitising)

  4. highSep 18, 2026GHSA-m6c8-jcw2-5r25 · CVE-2026-77615

    Opencast: Stored XSS in Paella player via WebVTT/DFXP caption cue text

    • paella-core < 1.50.6 → update to 1.50.6

    Same mistake in your own code? AI-XSS-001 (HTML inserted without sanitising)

  5. mediumSep 17, 2026GHSA-qrfj-mgw8-j9c6 · CVE-2026-88976

    @platejs/core HTML deserialization can trigger browser behavior during parsing

    • @platejs/core < 53.3.11 → update to 53.3.11
    • @platejs/core >= 54.0.0-beta.0, <= 54.0.0-beta.1 → no fix published yet

    Same mistake in your own code? AI-XSS-001 (HTML inserted without sanitising)

  6. mediumSep 17, 2026GHSA-9rgm-9g3h-6x36 · CVE-2026-81176

    Svelte devalue: DoS via malformed input

    • devalue < 5.9.1 → update to 5.9.2
  7. highSep 17, 2026GHSA-vrf4-mx87-p53w · CVE-2026-86039

    libp2p: PeerStore accepts attacker-signed PeerRecords for a victim peer ID and stores certified attacker addresses

    • @libp2p/peer-store >= 8.0.0, < 12.0.24 → update to 12.0.24

    Same mistake in your own code? AI-WEBHOOK-001 (unverified webhooks)

  8. highSep 17, 2026GHSA-c3gv-825q-fvmp · CVE-2026-86038

    libp2p: Gossipsub StrictSign accepts attacker-signed messages as a victim RSA peer ID

    • @libp2p/gossipsub >= 15.0.0, < 16.0.5 → update to 16.0.5

    Same mistake in your own code? AI-WEBHOOK-001 (unverified webhooks), AI-CRYPTO-001 (signatures not verified)

  9. highSep 17, 2026GHSA-pj96-35fp-cfcc · CVE-2026-85715

    ExifReader: DoS via Crafted HEIC/AVIF iloc Box - Memory Exhaustion

    • exifreader <= 4.41.0 → update to 4.41.1
  10. highSep 17, 2026GHSA-g74q-6g2f-874x · CVE-2026-63506

    Tina: [Broken Access Control] letting any TinaCloud user authorize against any self-hosted site

    • @tinacms/auth <= 1.1.3 → update to 1.1.4
    • next-tinacms-azure <= 15.0.0 → update to 15.0.1

    Same mistake in your own code? AI-IDOR-001 (records looked up by id without an owner check)

  11. mediumSep 17, 2026GHSA-657c-g7qc-r9j2 · CVE-2026-63225

    Redocly CLI: Path traversal when using `split` command

    • @redocly/cli < 1.34.17 → update to 1.34.17
    • @redocly/cli >= 2.0.0, < 2.33.2 → update to 2.33.2

    Same mistake in your own code? AI-PATH-001 (file paths built from the request)

  12. mediumSep 17, 2026GHSA-j9v4-rhgr-4m5f · CVE-2026-77360

    oRPC: Vary Header Injection in CORS Plugin leading to potential Cache/CORS Bypass

    • @orpc/server <= 1.14.7 → update to 1.14.8
  13. highSep 17, 2026GHSA-q69g-4hcv-6jg4 · CVE-2026-71538

    @cyclonedx/cyclonedx-npm: Shell Injection via Unsanitized --workspace Argument on Windows

    • @cyclonedx/cyclonedx-npm < 6.0.0 → update to 6.0.0

    Same mistake in your own code? AI-CMD-001 (shell commands built from variables)

  14. criticalSep 17, 2026GHSA-6j36-r6pr-59x4 · CVE-2026-63472

    Vendure affected by external-authentication account takeover: external login linked to a pre-existing account by email without verification

    • @vendure/core < 3.7.0 → update to 3.7.0
  15. mediumSep 17, 2026GHSA-xf65-r35x-wmmv · CVE-2026-63461

    Vendure: Shop API list queries can return non-public entities when filterOperator is OR

    • @vendure/core >= 1.0.0, < 3.6.5 → update to 3.6.5

    Same mistake in your own code? AI-SECRET-002 (secrets exposed to the browser)

  16. highSep 17, 2026GHSA-jgm3-qmp2-c4p7 · CVE-2026-63460

    Vendure: Unauthenticated ReDoS via `regex` filter on SQLite backends

    • vendure/core <= 3.6.4 → update to 3.6.5
  17. highSep 17, 2026GHSA-xhq9-whgq-49j5 · CVE-2026-63459

    Vendure has stored XSS in the Admin Dashboard via unsafe HTML-stripping (innerHTML) of entity descriptions

    • @vendure/dashboard < 3.6.5 → update to 3.6.5

    Same mistake in your own code? AI-XSS-001 (HTML inserted without sanitising)

  18. mediumSep 17, 2026GHSA-q8hw-4fvp-9rwv · CVE-2026-61793

    Nuxt OG Image has unauthenticated SSRF via `fonts[].path` URL parameter

    • nuxt-og-image >= 6.0.2, < 6.7.0 → update to 6.7.0

    Same mistake in your own code? AI-SSRF-001 (server fetching caller-supplied URLs)

  19. highSep 16, 2026GHSA-mxm6-v9r6-r94c · CVE-2026-63671

    @nuxtjs/mdc's URL sanitizer misses SVG xlink:href and data:text/html, allowing XSS from untrusted markdown at the default configuration

    • @nuxtjs/mdc < 0.22.1 → update to 0.22.1

    Same mistake in your own code? AI-XSS-001 (HTML inserted without sanitising)

  20. highSep 16, 2026GHSA-r2pf-9cw4-5j65 · CVE-2026-68904

    node-opcua: TCP Socket Leak (FIN-WAIT-2) via keepalive reconnection cycle - Resource Exhaustion

    • node-opcua-transport >= 2.0.0, < 2.170.0 → update to 2.170.0
    • node-opcua-client >= 2.0.0, < 2.170.0 → update to 2.170.0
    • node-opcua >= 2.0.0, < 2.170.0 → update to 2.170.0
  21. criticalSep 16, 2026GHSA-cv3r-c5h8-f4g5 · CVE-2026-61560

    @zereight/mcp-gitlab: Unauthenticated arbitrary file read via `upload_markdown` enables PAT exfiltration and full account takeover

    • @zereight/mcp-gitlab < 2.1.27 → update to 2.1.27

    Same mistake in your own code? AI-PATH-001 (file paths built from the request)

  22. criticalSep 15, 2026GHSA-2h44-8472-frjj · CVE-2026-61559

    @zereight/mcp-gitlab Vulnerable to Server-Side Request Forgery

    • @zereight/mcp-gitlab >= 0.0.1, < 2.1.27 → update to 2.1.27

    Same mistake in your own code? AI-SSRF-001 (server fetching caller-supplied URLs)

  23. criticalSep 15, 2026GHSA-vmp7-252j-cwp7 · CVE-2026-61568

    @zereight/mcp-gitlab: DNS rebinding reaches local Streamable HTTP MCP transport

    • @zereight/mcp-gitlab < 2.1.30 → update to 2.1.30
  24. highSep 15, 2026GHSA-5648-rgj9-v224

    @zereight/mcp-gitlab has multiple safety-control bypasses: execute_graphql read-only + allow-list bypass, unauthenticated transports, session-exhaustion DoS

    • @zereight/mcp-gitlab < 2.1.30 → update to 2.1.30
  25. criticalSep 11, 2026GHSA-325j-mg25-8q58 · CVE-2026-61534

    yayson: Prototype pollution in Store/LegacyStore deserialization

    • yayson <= 4.2.0 → update to 4.3.0

    Same mistake in your own code? AI-INJECT-001 (objects merged from untrusted input)

  26. highSep 11, 2026GHSA-rqx4-3f6q-3x2v · CVE-2026-59148

    @Mockoon/commons-server: Unauthenticated admin API + wildcard CORS allows mock-state hijack and secret theft

    • @mockoon/commons-server < 9.7.0 → update to 9.7.0
    • @mockoon/cli < 9.7.0 → update to 9.7.0

    Same mistake in your own code? AI-NEXT-001 (endpoints that never check who is asking), AI-CONFIG-001 (permissive CORS)

  27. mediumSep 11, 2026GHSA-8wqc-v2q8-vff2 · CVE-2026-59149

    @Mockoon/commons-server: Path traversal in templated `filePath` lets a request escape the served directory (prefix-only base check)

    • @mockoon/commons-server <= 9.6.1 → update to 9.7.0
    • @mockoon/cli <= 9.6.1 → update to 9.7.0

    Same mistake in your own code? AI-PATH-001 (file paths built from the request)

  28. highSep 11, 2026GHSA-65h7-9wrw-629c · CVE-2026-59973

    FrontMCP and mcp-from-openapi have bypass of OpenAPI external $ref SSRF fix

    • mcp-from-openapi >= 2.3.0, < 2.5.0 → update to 2.5.0
    • @frontmcp/adapters >= 1.2.1, < 1.5.0 → update to 1.5.0
    • frontmcp >= 1.2.1, < 1.5.0 → update to 1.5.0

    Same mistake in your own code? AI-SSRF-001 (server fetching caller-supplied URLs)

  29. highSep 10, 2026GHSA-4qpv-39hg-f7fx · CVE-2026-59965

    @jhb.software/payload-alt-text-plugin: Alt Text Endpoint Authorization Bypass via Payload Local API `overrideAccess` Omission

    • @jhb.software/payload-alt-text-plugin < 0.8.0 → update to 0.8.0
  30. highSep 10, 2026GHSA-4x45-gxvp-6283 · CVE-2026-59960

    @argos-ci/core: CI Branch Name OS Command Injection

    • @argos-ci/core <= 6.2.0 → update to 6.2.1

    Same mistake in your own code? AI-CMD-001 (shell commands built from variables)

  31. criticalSep 10, 2026GHSA-hf57-cqmx-p4gr · CVE-2026-88062

    OmniRoute ACP Custom-Agent Remote Code Execution (RCE)

    • omniroute <= 3.8.50 → no fix published yet

    Same mistake in your own code? AI-NEXT-001 (endpoints that never check who is asking)

  32. mediumSep 10, 2026GHSA-cw9w-vv67-hf73 · CVE-2026-86073

    n8n: Per-Resource OAuth Consent Bypass via Unbound Refresh Token Resource Substitution

    • n8n >= 2.38.0, < 2.38.1 → update to 2.38.1
    • n8n < 2.37.7 → update to 2.37.7
  33. mediumSep 10, 2026GHSA-q5wm-mgqx-fv2f · CVE-2026-86074

    n8n: Instance AI Credential Setup Accepts Unvalidated Probe URL from Fetched Content

    • n8n >= 2.38.0, < 2.38.2 → update to 2.38.2
    • n8n < 2.37.7 → update to 2.37.7

    Same mistake in your own code? AI-SSRF-001 (server fetching caller-supplied URLs)

  34. mediumSep 10, 2026GHSA-qgpw-8g46-w95v · CVE-2026-86995

    n8n: Git Node branch.<name>.remote Config Key Bypasses Sandbox Path Restriction, Enabling Local Git Repository Read

    • n8n < 1.123.76 → update to 1.123.76
    • n8n >= 2.38.0, < 2.38.2 → update to 2.38.2
    • n8n >= 2.0.0, < 2.37.7 → update to 2.37.7

    Same mistake in your own code? AI-PATH-001 (file paths built from the request)

  35. mediumSep 10, 2026GHSA-cqr2-h44g-v75v · CVE-2026-86085

    n8n: Cross-Tenant Project-Member PII Disclosure via Missing Per-Project Scope Check on Role Assignment Endpoints

    • n8n >= 2.38.0, < 2.38.2 → update to 2.38.2
    • n8n < 2.37.7 → update to 2.37.7
  36. mediumSep 10, 2026GHSA-pq6c-vh67-xpm3 · CVE-2026-86993

    n8n: Log Streaming Event Destinations Decrypt Generic-Auth Credentials Without Ownership Check

    • n8n < 1.123.76 → update to 1.123.76
    • n8n >= 2.38.0, < 2.38.2 → update to 2.38.2
    • n8n >= 2.0.0, < 2.37.7 → update to 2.37.7
  37. mediumSep 10, 2026GHSA-pf83-w3f9-8m37 · CVE-2026-86084

    n8n: Disabled OIDC SSO Endpoints Remain Active and Issue Valid Sessions

    • n8n < 1.123.76 → update to 1.123.76
    • n8n >= 2.38.0, < 2.38.2 → update to 2.38.2
    • n8n >= 2.0.0, < 2.37.7 → update to 2.37.7
  38. mediumSep 10, 2026GHSA-5m98-cgcr-xx3q · CVE-2026-86080

    n8n: GitHub Trigger 422 Reuse Path Skips Webhook Secret Storage, Causing Signature Verification to Fail-Open

    • n8n < 1.123.76 → update to 1.123.76
    • n8n >= 2.38.0, < 2.38.2 → update to 2.38.2
    • n8n >= 2.0.0, < 2.37.7 → update to 2.37.7

    Same mistake in your own code? AI-CRYPTO-001 (signatures not verified)

  39. mediumSep 10, 2026GHSA-f2cp-m7mv-8jpv · CVE-2026-86079

    n8n: Path Injection in Elasticsearch and ElasticSecurity Nodes via Unencoded Identifiers

    • n8n < 1.123.76 → update to 1.123.76
    • n8n >= 2.38.0, < 2.38.2 → update to 2.38.2
    • n8n >= 2.0.0, < 2.37.7 → update to 2.37.7

    Same mistake in your own code? AI-PATH-001 (file paths built from the request)

  40. mediumSep 10, 2026GHSA-679f-58pq-4v2c · CVE-2026-86078

    n8n: Prototype Pollution via Workflow Structure Summary Can Lead to Denial of Service

    • n8n >= 2.38.0, < 2.38.2 → update to 2.38.2
    • n8n < 2.37.7 → update to 2.37.7

    Same mistake in your own code? AI-INJECT-001 (objects merged from untrusted input)

  41. mediumSep 10, 2026GHSA-65xw-2v52-jhxc · CVE-2026-86994

    n8n: Cross-User Active Workflow ID and Lifecycle Event Disclosure via Missing userId Filter

    • n8n < 1.123.76 → update to 1.123.76
    • n8n >= 2.38.0, < 2.38.2 → update to 2.38.2
    • n8n >= 2.0.0, < 2.37.7 → update to 2.37.7
  42. highSep 10, 2026GHSA-6xcw-7xm6-48c6 · CVE-2026-86083

    n8n: Expression Sandbox Escape via Shared Builtin Tampering and Code-Printer Injection Leads to Code Execution

    • n8n < 1.123.76 → update to 1.123.76
    • n8n >= 2.38.0, < 2.38.2 → update to 2.38.2
    • n8n >= 2.0.0, < 2.37.7 → update to 2.37.7
  43. mediumSep 10, 2026GHSA-35jj-42hp-8gmq · CVE-2026-86077

    n8n: Anonymous Approval-Gate Bypass via Reused resumeToken over the Chat WebSocket

    • n8n >= 2.38.0, < 2.38.2 → update to 2.38.2
    • n8n < 2.37.7 → update to 2.37.7
  44. highSep 10, 2026GHSA-v3p8-whq6-r5jg · CVE-2026-88060

    Angular: SSR XSS via Unescaped <template> Content Across DocumentFragment Boundaries in Fallback Raw-Content Elements

    • @angular/platform-server >= 22.0.0, < 22.1.4 → update to 22.1.4
    • @angular/platform-server >= 21.0.0, < 21.2.22 → update to 21.2.22
    • @angular/platform-server >= 20.0.0, < 20.3.30 → update to 20.3.30
    • @angular/platform-server <= 19.2.25 → no fix published yet

    Same mistake in your own code? AI-XSS-001 (HTML inserted without sanitising)

  45. highSep 10, 2026GHSA-f6mr-pjwc-34m4 · CVE-2026-88056

    Angular: SSRF and Cross-Origin Credential Disclosure via URL Resolution Discrepancy in SSR

    • @angular/platform-server >= 22.0.0, < 22.1.4 → update to 22.1.4
    • @angular/platform-server >= 21.0.0, < 21.2.22 → update to 21.2.22
    • @angular/platform-server >= 20.0.0, < 20.3.30 → update to 20.3.30
    • @angular/platform-server <= 19.2.25 → no fix published yet

    Same mistake in your own code? AI-SSRF-001 (server fetching caller-supplied URLs)

  46. mediumSep 10, 2026GHSA-p297-fm68-3q8c · CVE-2026-88059

    Angular: Information Leak via `HttpTransferCache` Bypass When Using `withRequestsMadeViaParent`

    • @angular/common >= 22.0.0, < 22.1.1 → update to 22.1.1
    • @angular/common >= 21.0.0, < 21.2.20 → update to 21.2.20
    • @angular/common >= 20.0.0, < 20.3.28 → update to 20.3.28
    • @angular/common <= 19.2.25 → no fix published yet

    Same mistake in your own code? AI-SECRET-002 (secrets exposed to the browser)

  47. mediumSep 10, 2026GHSA-hh8m-fm6v-7cvg · CVE-2026-88057

    Angular: Sanitization bypass via directive host bindings on concrete host elements in @angular/core and @angular/compiler

    • @angular/core >= 22.0.0, < 22.1.0 → update to 22.1.0
    • @angular/compiler >= 22.0.0, < 22.1.0 → update to 22.1.0
    • @angular/core >= 21.0.0, < 21.2.20 → update to 21.2.20
    • @angular/compiler >= 21.0.0, < 21.2.20 → update to 21.2.20

    Same mistake in your own code? AI-XSS-001 (HTML inserted without sanitising)

  48. highSep 10, 2026GHSA-34ff-336r-5q23 · CVE-2026-86082

    n8n: Domain-Restriction Bypass via Unguarded Model-Search Endpoint in OpenAI Chat Model Node

    • n8n < 1.123.76 → update to 1.123.76
    • n8n >= 2.38.0, < 2.38.2 → update to 2.38.2
    • n8n >= 2.0.0, < 2.37.7 → update to 2.37.7

    Same mistake in your own code? AI-SSRF-001 (server fetching caller-supplied URLs)

  49. highSep 10, 2026GHSA-j535-v25q-vx3q · CVE-2026-86081

    n8n: Regular Expression Denial of Service in the Default Blocked-File-Pattern Match via a Git Node Clone Path

    • n8n < 1.123.76 → update to 1.123.76
    • n8n >= 2.38.0, < 2.38.2 → update to 2.38.2
    • n8n >= 2.0.0, < 2.37.7 → update to 2.37.7
  50. highSep 10, 2026GHSA-hh89-3r9w-qj3j · CVE-2026-86075

    n8n: Unauthenticated Persistent Storage Exhaustion via OAuth Dynamic Client Registration Endpoint

    • n8n >= 2.38.0, < 2.38.2 → update to 2.38.2
    • n8n < 2.37.7 → update to 2.37.7
  51. highSep 10, 2026GHSA-hw8v-xxg5-vvvx · CVE-2026-86076

    n8n: Expression Sandbox Escape via Class-Field Sanitizer Rebinding Can Lead to Code Execution

    • n8n < 1.123.76 → update to 1.123.76
    • n8n >= 2.38.0, < 2.38.2 → update to 2.38.2
    • n8n >= 2.0.0, < 2.37.7 → update to 2.37.7
  52. highSep 10, 2026GHSA-x7m8-jrm8-hpvx

    @eigenpal/docx-editor-react: CSS injection and print-time XSS via unescaped embedded font-family name

    • @eigenpal/docx-editor-core <= 1.8.2 → update to 1.8.3
    • @eigenpal/docx-editor-react <= 1.8.2 → update to 1.8.3

    Same mistake in your own code? AI-XSS-001 (HTML inserted without sanitising)

  53. highSep 9, 2026GHSA-g72f-jw3w-mgh7 · CVE-2026-59179

    @openhop/server: Path Traversal in Flow ID File Operations

    • @openhop/server <= 0.3.5 → update to 0.3.6

    Same mistake in your own code? AI-PATH-001 (file paths built from the request)

  54. highSep 9, 2026GHSA-wcjj-9m6g-2fr2 · CVE-2026-59176

    functype-mcp-server: MCP `set_functype_version` Package Alias RCE via Unsanitized pnpm install + Dynamic Import

    • functype-mcp-server <= 1.4.3 → update to 1.4.4
  55. highSep 9, 2026GHSA-2r5q-h53f-9rp3 · CVE-2026-59160

    @yeger/turbo-graph: Unauthenticated Network-Exposed Task Execution via /api/run

    • @yeger/turbo-graph <= 2.8.8 → update to 2.8.12

    Same mistake in your own code? AI-NEXT-001 (endpoints that never check who is asking)

  56. highSep 9, 2026GHSA-fxg7-897c-57mp · CVE-2026-59158

    Nuxt Ollama: Public Runtime Config Exposes Ollama API Key to Browser Clients

    • nuxt-ollama >= 1.2.26, < 1.3.1 → update to 1.3.1
  57. highSep 9, 2026GHSA-7w5x-hrqm-74c2 · CVE-2026-85730

    smol-toml: Denial of Service via malformed TOML documents

    • smol-toml <= 1.7.0 → update to 1.7.1
  58. mediumSep 8, 2026GHSA-7hgx-277f-7vmg · CVE-2026-86996

    n8n: Agent Workflow Tool Bypasses Sub-Workflow Caller Policy

    • n8n >= 2.38.0, < 2.38.2 → update to 2.38.2
    • n8n < 2.37.7 → update to 2.37.7
  59. mediumSep 8, 2026GHSA-wmmp-3585-3rmp

    Nodemailer: IDN/Punycode domain allow-list bypass leads to email delivery to an attacker-controlled domain

    • nodemailer < 9.1.0 → update to 9.1.0
  60. highSep 8, 2026GHSA-2x7j-588g-ccc2

    Nodemailer: Quadratic (O(n²)) time complexity in addressparser allows remote denial of service via a crafted address list

    • nodemailer < 9.1.0 → update to 9.1.0

Source: GitHub Advisory Database, reviewed advisories for the npm ecosystem. SixthWall does not write these advisories; it shows them so you can act on them, and links each to the rule that prevents the same class of bug in code you write.