Skip to content
Fencer Intel

All · npm

Newest first, late arrivals on top. Also a feed.

  1. 7.8
    CVE-2026-100597 OpenClaw before 2026.7.1 Path Traversal via Filesystem Race
    npm maintainer advisory
  2. 2.6
    CVE-2026-100539 OpenClaw before 2026.8.1 Memory Access Control Bypass
    npm maintainer advisory
  3. 7.1
    CVE-2026-100555 OpenClaw before 2026.8.1 DNS Rebinding via attachment delivery
    npm maintainer advisory
  4. 8.3
    CVE-2026-100589 OpenClaw before 2026.7.1 Sandbox Bypass via Browser Node
    npm maintainer advisory
  5. 8.8
    CVE-2026-100586 OpenClaw Codex before 2026.7.1 Authorization Bypass via Bind
    npm maintainer advisory
  6. 8.1
    CVE-2026-100532 openclaw WhatsApp before 2026.8.1 Authentication Bypass
    npm maintainer advisory
  7. 8.0
    CVE-2026-100559 OpenClaw before 2026.8.1 Command Injection via Escaped Newlines
    npm maintainer advisory
  8. 8.8
    CVE-2026-100580 OpenClaw before 2026.7.1 Remote Code Execution via cron tool
    npm maintainer advisory
  9. 6.5
    CVE-2026-100594 OpenClaw before 2026.7.1 Authorization Bypass via trajectory export
    npm maintainer advisory
  10. 5.4
    CVE-2026-100550 OpenClaw before 2026.8.1 Authentication Bypass via Access Group
    npm maintainer advisory
  11. 6.4
    CVE-2026-100529 OpenClaw before 2026.8.1 Authorization Scope Widening via File-Transfer
    npm maintainer advisory
  12. 8.3
    CVE-2026-100557 OpenClaw before 2026.8.1 Authorization Bypass via Skill Tool Dispatch
    npm maintainer advisory
  13. 7.5
    CVE-2026-100560 OpenClaw before 2026.8.1 Reusable Exec Approvals Authorization Bypass
    npm maintainer advisory
  14. 5.9
    CVE-2026-100574 OpenClaw before 2026.8.1 SSRF via Trusted-Host DNS
    npm maintainer advisory
  15. 3.1
    CVE-2026-100542 OpenClaw before 2026.8.1 Extraction Limit Bypass via tar.bz2
    npm maintainer advisory
  16. 5.3
    CVE-2026-100548 OpenClaw before 2026.8.1 Credential Exposure via Embedding Fallback
    npm maintainer advisory
  17. 7.5
    CVE-2026-100535 OpenClaw before 2026.8.1 Privilege Escalation via Session Memory
    npm maintainer advisory
  18. 6.4
    CVE-2026-100546 OpenClaw 2026.7.2 before 2026.9.2 Authentication Bypass via Voice Transcript
    npm maintainer advisory
  19. 5.3
    CVE-2026-100533 OpenClaw before 2026.8.1 Path Traversal via Unicode Fallback
    npm maintainer advisory
  20. 7.8
    CVE-2026-100570 OpenClaw before 2026.8.1 Remote Code Execution via CLOUDSDK_PYTHON_ARGS
    npm maintainer advisory
  21. 3.3
    CVE-2026-100573 OpenClaw before 2026.8.1 Sandbox Policy Bypass via MCP Loopback
    npm maintainer advisory
  22. 4.3
    CVE-2026-100590 OpenClaw before 2026.7.1 Authorization Bypass via voice set
    npm maintainer advisory
  23. 5.3
    CVE-2026-100545 OpenClaw before 2026.8.1 Policy Bypass via Session Filename Generation
    npm maintainer advisory
  24. 8.8
    CVE-2026-100575 OpenClaw Slack before 2026.8.1 Authentication Bypass via Group DM
    npm maintainer advisory
  25. 7.6
    CVE-2026-100579 OpenClaw before 2026.7.1 Authentication Bypass via Spoofed Requester
    npm maintainer advisory
  26. 7.5
    CVE-2026-100558 OpenClaw before 2026.8.1 Resource Exhaustion via WebSocket Upgrade
    npm maintainer advisory
  27. 6.5
    CVE-2026-100595 OpenClaw before 2026.7.1 Authorization Bypass via diagnostics
    npm maintainer advisory
  28. 5.4
    CVE-2026-100576 OpenClaw before 2026.8.1 SSRF via Browser Wait Predicates
    npm maintainer advisory
  29. 7.3
    CVE-2026-100530 OpenClaw before 2026.8.1 Exec Approval Directory Binding
    npm maintainer advisory
  30. 5.4
    CVE-2026-100564 OpenClaw before 2026.8.1 CSV Formula Injection via Attendance Export
    npm maintainer advisory