tocsin

CVE-2026-41679

2 advisories.

npm/paperclipai CVE-2026-41679: critical 10, EPSS 7.36%

paperclip Vulnerable to Unauthenticated Remote Code Execution via Import Authorization Bypass

Action: Upgrade paperclipai to 2026.410.0 or later.

npm i paperclipai@2026.410.0

Affected

introducedfixedlast affected
02026.410.0-

Fixed versions

2026.410.0

Sources

CVE-2026-41679 · published · modified · JSON

npm/@paperclipai/server CVE-2026-41679: critical 10, EPSS 7.36%

paperclip Vulnerable to Unauthenticated Remote Code Execution via Import Authorization Bypass

Action: Upgrade @paperclipai/server to 2026.410.0 or later.

npm i @paperclipai/server@2026.410.0

Affected

introducedfixedlast affected
02026.410.0-

Fixed versions

2026.410.0

Sources

CVE-2026-41679 · published · modified · JSON