CRITICAL10.0npm
GHSA-68qg-g8mg-6pr7· CVE-2026-41679paperclip Vulnerable to Unauthenticated Remote Code Execution via Import Authorization Bypass
Modified: 5/5/2026
package
pkg:npm/paperclipai
paperclip Vulnerable to Unauthenticated Remote Code Execution via Import Authorization Bypass
Modified: 5/5/2026
Paperclip: codex_local inherited ChatGPT/OpenAI-connected Gmail and was able to send real email
Modified: 4/16/2026