Medium
CVE-2026-43566
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 5,032
Reset filters
Medium
CVE-2026-42436
OpenClaw: Browser snapshot and screenshot routes could expose internal page content after navigation
High
CVE-2026-43528
OpenClaw: config.get redaction bypass through sourceConfig and runtimeConfig aliases
Medium
CVE-2026-43535
OpenClaw: Collect-mode queue batches could reuse the last sender authorization context
High
CVE-2026-41279
Flowise: Unauthenticated TTS endpoint accepts arbitrary credential IDs — enables API credit abuse via stored credentials
High
CVE-2026-41278
Flowise: Public chatflow endpoints return unsanitized flowData including plaintext API keys, passwords, and credential IDs
High
CVE-2026-41277
Flowise: Mass Assignment in DocumentStore Create Endpoint Leads to Cross-Workspace Object Takeover (IDOR)
High
CVE-2026-40931
Complete Bypass of CVE-2026-24884 Patch via Git-Delivered Symlink Poisoning in compressing
Medium
CVE-2026-43575
OpenClaw: Sandbox noVNC helper route exposed interactive browser session credentials
Medium
CVE-2026-42259
Saltcorn: Open Redirect in `POST /auth/login` due to incomplete `is_relative_url` validation (backslash bypass)
Critical
CVE-2026-41478
Saltcorn: SQL Injection via Unparameterized Sync Endpoints (maxLoadedId)
Critical
ghsa-3xx2-mqjm-hg9x
Paperclip: Cross-tenant agent API key IDOR in `/agents/:id/keys` routes allows full victim-company compromise
Medium
ghsa-fpw4-p57j-hqmq
Paperclip: Stored XSS via javascript: URLs in MarkdownBody — urlTransform override disables react-markdown sanitization
Medium
ghsa-p7mm-r948-4q3q
Paperclip: Approval decision attribution spoofing via client-controlled `decidedByUserId` in paperclip server
Critical
ghsa-47wq-cj9q-wpmp
Paperclip: Cross-tenant agent API token minting via missing assertCompanyAccess on /api/agents/:id/keys
Critical
ghsa-vr7g-88fq-vhq3
Paperclip: OS Command Injection via Execution Workspace cleanupCommand
High
ghsa-gqqj-85qm-8qhf
Paperclip: codex_local inherited ChatGPT/OpenAI-connected Gmail and was able to send real email
High
ghsa-xfqj-r5qw-8g4j
Paperclip: Unauthenticated Access to Multiple API Endpoints in Authenticated Mode
High
ghsa-w8hx-hqjv-vjcq
Paperclip: Malicious skills able to exfiltrate and destroy all user data
High
CVE-2026-41208
Paperclip: Privilege Escalation via Agent-Controlled workspaceStrategy.provisionCommand Leading to OS Command Execution
Medium
ghsa-3pw3-v88x-xj24
Paperclip: Arbitrary File Read via Agent-Controlled adapterConfig.instructionsFilePath
Critical
CVE-2026-41428
Budibase: Authentication Bypass via Unanchored Regex in Public Endpoint Matcher — Unauthenticated Access to Protected Endpoints
High
CVE-2026-41423
Angular: SSRF via protocol-relative and backslash URLs in Angular Platform-Server
Medium
CVE-2026-6410
@fastify/static vulnerable to path traversal in directory listing
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.