npm/@paperclipai/server: medium 4.3

Paperclip: Approval decision attribution spoofing via client-controlled `decidedByUserId` in paperclip server

Action: Upgrade @paperclipai/server to 2026.416.0 or later.

npm i @paperclipai/server@2026.416.0

Affected

Fixed versions

Sources

• osv: GHSA-p7mm-r948-4q3q
• https://github.com/paperclipai/paperclip/security/advisories/GHSA-p7mm-r948-4q3q
• https://github.com/paperclipai/paperclip

published 2026-04-16T22:48:46Z · modified 2026-04-16T23:04:48.568901Z · JSON