Skip to content
Fencer Intel

All · npm

Newest first, late arrivals on top. Also a feed.

  1. 5.4
    CVE-2026-100528 OpenClaw before 2026.8.1 Credential Disclosure via Provider Endpoint
    npm maintainer advisory
  2. 6.5
    CVE-2026-100531 openclaw Slack before 2026.8.1 Authorization Bypass
    npm maintainer advisory
  3. 4.3
    CVE-2026-100525 OpenClaw diagnostics-prometheus before 2026.9.3 Authentication Bypass
    npm maintainer advisory
  4. 8.8
    CVE-2026-100544 openclaw voice-call before 2026.8.1 Authorization Bypass
    npm maintainer advisory
  5. 5.4
    CVE-2026-100549 OpenClaw before 2026.8.1 Path Traversal via QQBot voice filenames
    npm maintainer advisory
  6. 6.7
    CVE-2026-100584 OpenClaw before 2026.7.1 Allowlist Bypass via Workspace Shadows
    npm maintainer advisory
  7. 7.1
    CVE-2026-100598 OpenClaw before 2026.7.1 Approval Binding Logic Error
    npm maintainer advisory
  8. 7.6
    CVE-2026-100578 OpenClaw before 2026.7.1 Authorization Bypass via chat.send
    npm maintainer advisory
  9. 7.5
    CVE-2026-100543 OpenClaw before 2026.8.1 Information Disclosure via Configuration Hash
    npm maintainer advisory
  10. 5.4
    CVE-2026-100593 OpenClaw before 2026.7.1 Authentication Bypass via activation
    npm maintainer advisory
  11. 8.8
    CVE-2026-100587 OpenClaw before 2026.7.1 Authorization Bypass via Codex Install
    npm maintainer advisory
  12. 5.5
    CVE-2026-100569 OpenClaw before 2026.8.1 Credential Exposure via Endpoint Override
    npm maintainer advisory
  13. 8.0
    CVE-2026-100585 OpenClaw before 2026.7.1 Authentication Bypass via MCP Channel
    npm maintainer advisory
  14. 8.2
    CVE-2026-100567 OpenClaw before 2026.8.1 DNS Rebinding via CDP Hostname
    npm maintainer advisory
  15. 6.3
    CVE-2026-100556 OpenClaw before 2026.8.1 Authentication Bypass via Session Reset
    npm maintainer advisory
  16. 5.3
    CVE-2026-100527 OpenClaw before 2026.8.2 Denial of Service via Browser Relay
    npm maintainer advisory
  17. 8.3
    CVE-2026-100588 OpenClaw before 2026.7.1 Authentication Bypass via node.invoke
    npm maintainer advisory
  18. 5.4
    CVE-2026-100562 OpenClaw before 2026.8.1 Authorization Bypass via sessions.create
    npm maintainer advisory
  19. 8.3
    CVE-2026-100568 OpenClaw before 2026.8.1 Unauthorized Command Job Access
    npm maintainer advisory
  20. 7.5
    CVE-2026-100541 OpenClaw Matrix before 2026.8.1 Authorization Bypass via Case Folding
    npm maintainer advisory
  21. 4.3
    CVE-2026-100553 OpenClaw 2026.6.9 before 2026.8.1 Cross-Context Policy Bypass via Feishu unpin
    npm maintainer advisory
  22. 6.8
    CVE-2026-100540 OpenClaw Feishu before 2026.8.1 Authentication Bypass via Disabled Account
    npm maintainer advisory
  23. 8.0
    CVE-2026-100561 OpenClaw before 2026.8.1 Authentication Bypass via Exec Wrapper
    npm maintainer advisory
  24. 6.5
    CVE-2026-100582 OpenClaw Channel Plugins before 2026.8.1 Channel Read Allowlist Bypass
    npm
  25. 4.2
    CVE-2026-100554 OpenClaw before 2026.8.1 Canvas Capability Revocation Bypass
    npm maintainer advisory
  26. 3.1
    CVE-2026-100534 OpenClaw before 2026.8.1 Session Cancellation Authorization Bypass
    npm maintainer advisory
  27. 5.3
    CVE-2026-100572 OpenClaw before 2026.8.1 Denial of Service via Rate Limit
    npm maintainer advisory
  28. 6.3
    CVE-2026-100577 OpenClaw before 2026.8.1 Server-Side Request Forgery via Video Asset
    npm maintainer advisory
  29. 6.5
    CVE-2026-100536 OpenClaw before 2026.8.1 Path Traversal via Structured Attachments
    npm maintainer advisory
  30. 6.5
    CVE-2026-100566 OpenClaw LINE before 2026.8.1 Access Control Inheritance
    npm maintainer advisory