@paperclipai/server vulnerabilities

CVEs whose affected-version data names the @paperclipai/server package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-119713High· 8.8

1w ago

Paperclip 2026.403.0 before 2026.416.0 RCE via Execution Workspace Cleanup Commands

Paperclip 2026.403.0 before 2026.416.0 contains a remote code execution vulnerability that allows agent API key holders to set cleanupCommand and teardownCommand via PATCH /api/execution-workspaces/:id. When the workspace is archived, cl…

▾ Twilightpaperclipai · @paperclipai/serverEPSS 0.80%via CVEORG