OpenClaw's exec allowlist analysis rejects shell expansion in unquoted heredocs

## Summary Exec allowlist analysis rejects shell expansion in unquoted heredocs. ## Affected Packages / Versions - Pack

历史摘要 · 未重新核验 · GitHub Advisory

OpenClaw: MCP loopback owner context is derived from server-issued bearer tokens

## Summary MCP loopback owner context is derived from server-issued bearer tokens. ## Affected Packages / Versions - Pa

历史摘要 · 未重新核验 · GitHub Advisory

OpenClaw: Workspace dotenv files cannot override connector endpoint hosts

## Summary Workspace dotenv files cannot override connector endpoint hosts. ## Affected Packages / Versions - Package:

历史摘要 · 未重新核验 · GitHub Advisory

OpenClaw's ACP child sessions inherit subagent security envelope constraints

## Summary ACP child sessions inherit subagent security envelope constraints. ## Affected Packages / Versions - Package

历史摘要 · 未重新核验 · GitHub Advisory

OpenClaw validates Zalo outbound photo URLs through the SSRF guard

## Summary Zalo outbound photo URLs are validated through the SSRF guard. ## Affected Packages / Versions - Package: op

历史摘要 · 未重新核验 · GitHub Advisory

Clerk has an authorization bypass when combining organization, billing, or reverification checks

CVE-2026-42349

### Summary `has()`, `auth.protect()`, and related authorization predicates in `@clerk/shared`, `@clerk/nextjs`, `@cler

历史摘要 · 未重新核验 · GitHub Advisory

n8n-mcp's IPv4-mapped IPv6 addresses bypass SSRF protection in validateUrlSync(), enabling full SSRF for SDK embedders

CVE-2026-42449

### Impact In the SDK embedder path (`N8NDocumentationMCPServer` constructor, `getN8nApiClient()`, and `validateInstanc

历史摘要 · 未重新核验 · GitHub Advisory

Jupyter Notebook Vulnerable to Authentication Token Theft via CommandLinker XSS

CVE-2026-40171

### Impact A stored Cross-Site Scripting (XSS) vulnerability in Jupyter Notebook allows attackers to steal authenticati

历史摘要 · 未重新核验 · GitHub Advisory

Claude SDK for TypeScript has Insecure Default File Permissions in Local Filesystem Memory Tool

CVE-2026-41686

The `BetaLocalFilesystemMemoryTool` in the Anthropic TypeScript SDK created memory files and directories using the Node.

历史摘要 · 未重新核验 · GitHub Advisory

i18next-http-middleware has path traversal / SSRF via user-controlled language and namespace parameters

CVE-2026-42353

### Summary Versions of `i18next-http-middleware` prior to 3.9.3 pass the user-controlled `lng` and `ns` values from `g

历史摘要 · 未重新核验 · GitHub Advisory

Marked Vulnerable to OOM Denial of Service via Infinite Recursion in marked Tokenizer

CVE-2026-41680

### Summary A critical Denial of Service (DoS) vulnerability exists in `marked@18.0.0`. By providing a specific 3-byte i

历史摘要 · 未重新核验 · GitHub Advisory

OpenClaw: Webchat audio embedding could read local files without local-root containment

## Impact OpenClaw deployments before `2026.4.15` could embed host-local audio files into webchat responses without app

历史摘要 · 未重新核验 · GitHub Advisory

OpenClaw: Owner-enforced commands could accept wildcard channel senders as command owners

## Impact OpenClaw deployments before `2026.4.21` could treat a non-owner sender as authorized for owner-enforced slash

历史摘要 · 未重新核验 · GitHub Advisory

n8n has XML Node Prototype Pollution that to RCE

CVE-2026-42232

## Impact An authenticated user with permission to create or modify workflows could achieve global prototype pollution v

历史摘要 · 未重新核验 · GitHub Advisory

n8n has Prototype Pollution in XML Webhook Body Parser that Leads to RCE

CVE-2026-42231

## Impact A flaw in the `xml2js` library used to parse XML request bodies in n8n's webhook handler allowed prototype pol

历史摘要 · 未重新核验 · GitHub Advisory

n8n Vulnerable to XSS via MCP OAuth client

CVE-2026-42235

## Impact An unauthenticated attacker could register a malicious MCP OAuth client with a crafted `client_name`. If a vic

历史摘要 · 未重新核验 · GitHub Advisory

n8n's Credential Authorization Bypass in dynamic-node-parameters Allows Foreign API Key Replay

CVE-2026-42226

## Impact The `dynamic-node-parameters` endpoints did not verify whether the authenticated caller was authorized to use

历史摘要 · 未重新核验 · GitHub Advisory

n8n has a Python Task Runner Sandbox Escape Vulnerability

CVE-2026-42234

## Impact An authenticated user with permission to create or modify workflows containing a Python Code Node could escape

历史摘要 · 未重新核验 · GitHub Advisory

n8n has Public API Variables IDOR that Allows Cross-Project Secret Disclosure

CVE-2026-42227

## Impact An authenticated user with a valid API key scoped to `variable:list` could read variables from projects they a

历史摘要 · 未重新核验 · GitHub Advisory

n8n Vulnerable to Unauthenticated Denial of Service via MCP Client Registration

CVE-2026-42236

## Impact The MCP OAuth client registration endpoint accepted unauthenticated requests and stored client data without ad

历史摘要 · 未重新核验 · GitHub Advisory