No Title
## Affected Packages / Versions - Package: `openclaw` (npm) - Affected versions: `< 2026.4.20` - Patched version: `2026
2026-04-28 归档
今日共收录 1050 条安全情报，包含 258 个 CVE，457 篇安全通告，以及 29 篇研究论文。
← 返回归档列表No Title
## Affected Packages / Versions - Package: `openclaw` (npm) - Affected versions: `< 2026.4.20` - Patched version: `2026
No Title
## Affected Packages / Versions - Package: `openclaw` (npm) - Affected versions: `< 2026.4.20` - Patched version: `2026
No Title
## Affected Packages / Versions - Package: `openclaw` (npm) - Affected versions: `< 2026.4.20` - Patched version: `2026
No Title
## Affected Packages / Versions - Package: `openclaw` (npm) - Affected versions: `< 2026.4.20` - Patched version: `2026
No Title
### Summary GitPython blocks dangerous Git options such as `--upload-pack` and `--receive-pack` by default, but the equi
No Title
## Summary `IsPasswordMatch` in `backend/db/models.go` falls back to a hard-coded `bcrypt("null")` placeholder whenever
No Title
**Summary** The zrok WebDAV drive backend (davServer.Dir) restricts path traversal through lexical normalization but doe
No Title
### Summary Heimdall performs rule matching on the raw (non-normalized) request path, while downstream components may n
No Title
### Summary Heimdall performs host matching in a case-sensitive manner, while HTTP hostnames are case-insensitive. This
No Title
### Summary Heimdall handles URL-encoded slashes (`%2F`) in a case-sensitive manner, while percent-encoding is defined
No Title
### Impact _What kind of vulnerability is it? Who is impacted?_ **Command Injection vulnerabilities in electerm:** A c
No Title
gitverify is still a prototype. ### Impact The bug is related to `requireSignedTags` which is on by default: an unsigne
No Title
### Summary An unchecked type assertion in the `forEach` mutation handler allows any user with permission to create a `
No Title
### TL;DR This vulnerability affects all Kirby sites where users of a particular role have no permission to create page
Oracle Corporate Security Blog
Oracle Corporate Security Blog
Guidelines for reporting security vulnerabilities
Guidelines for reporting security vulnerabilities
Critical Patch Update - April 2026
Critical Patch Update - April 2026
Critical Patch Update - January 2026
Critical Patch Update - January 2026
Critical Patch Update - October 2025
Critical Patch Update - October 2025