OpenClaw versions 2026.3.22 before 2026.6.6 contain an authorization bypass vulnerability where...
CVE-2026-62196
OpenClaw versions 2026.3.22 before 2026.6.6 contain an authorization bypass vulnerability where WhatsApp group IDs can s
#severity:high
共收录 5441 条相关情报。
← 返回所有主题OpenClaw versions before 2026.6.1 contain a flaw in host exec environment filtering that could...
CVE-2026-62200
OpenClaw versions before 2026.6.1 contain a flaw in host exec environment filtering that could allow Git ext transport t
Cockpit CMS contains a missing authorization vulnerability in the Bucket file storage API (...
CVE-2026-57855
Cockpit CMS contains a missing authorization vulnerability in the Bucket file storage API (/system/buckets/api). The api
OpenClaw versions before 2026.6.6 contain a flaw in host exec environment filtering that can miss...
CVE-2026-62199
OpenClaw versions before 2026.6.6 contain a flaw in host exec environment filtering that can miss interpreter startup va
OpenClaw versions 2026.5.20 before 2026.6.6 contain an authorization bypass vulnerability in the...
CVE-2026-62195
OpenClaw versions 2026.5.20 before 2026.6.6 contain an authorization bypass vulnerability in the MCP loopback feature th
OpenClaw versions 2026.6.6 before 2026.6.9 contain an authorization bypass vulnerability in...
CVE-2026-62191
OpenClaw versions 2026.6.6 before 2026.6.9 contain an authorization bypass vulnerability in message mutation handling th
PasswordPusher before 2.9.2 contains a brute-force vulnerability in the POST /p/:token/access...
CVE-2026-61458
PasswordPusher before 2.9.2 contains a brute-force vulnerability in the POST /p/:token/access endpoint that lacks route-
OpenClaw versions before 2026.6.9 contain a symlink following vulnerability in the mirror sync...
CVE-2026-62189
OpenClaw versions before 2026.6.9 contain a symlink following vulnerability in the mirror sync feature that allows lower
OpenClaw versions before 2026.6.8 contain an authorization bypass vulnerability in OpenAI...
CVE-2026-62186
OpenClaw versions before 2026.6.8 contain an authorization bypass vulnerability in OpenAI-compatible HTTP model override
OpenClaw Feishu tools (npm package @openclaw/feishu) in versions <= 2026.6.6 could ignore per...
CVE-2026-62187
OpenClaw Feishu tools (npm package @openclaw/feishu) in versions <= 2026.6.6 could ignore per-account disablement. A low
OpenClaw versions 2026.6.6 before 2026.6.9 contain an authorization bypass vulnerability in...
CVE-2026-62192
OpenClaw versions 2026.6.6 before 2026.6.9 contain an authorization bypass vulnerability in Discord guild actions that a
OpenClaw @openclaw/feishu versions 2026.6.6 and earlier contain an incorrect authorization...
CVE-2026-62188
OpenClaw @openclaw/feishu versions 2026.6.6 and earlier contain an incorrect authorization vulnerability in which the Fe
OpenClaw versions before 2026.6.9 contain an authorization bypass vulnerability in the flock...
CVE-2026-62190
OpenClaw versions before 2026.6.9 contain an authorization bypass vulnerability in the flock wrapper that allows lower-t
Argo CD Helm Chart before 10.0.0 fails to install network policies by default, allowing any pod...
CVE-2026-62185
Argo CD Helm Chart before 10.0.0 fails to install network policies by default, allowing any pod on a cluster to access r
luci-app-banip contains a log parsing vulnerability where the awk-based parser extracts the first...
CVE-2026-62184
luci-app-banip contains a log parsing vulnerability where the awk-based parser extracts the first IPv4 address from log
Ollama downloadBlob Improper Validation of Array Index Denial-of-Service Vulnerability. This...
CVE-2026-15685
Ollama downloadBlob Improper Validation of Array Index Denial-of-Service Vulnerability. This vulnerability allows remote
Glarysoft Glary Utilities Link Following Local Privilege Escalation Vulnerability. This...
CVE-2026-15684
Glarysoft Glary Utilities Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attac
Lorex 2K Indoor Wi-Fi Security Camera CDeviceOperator Format String Remote Code Execution...
CVE-2026-15680
Lorex 2K Indoor Wi-Fi Security Camera CDeviceOperator Format String Remote Code Execution Vulnerability. This vulnerabil
Lorex 2K Indoor Wi-Fi Security Camera Device Management Server Improper Certificate Validation...
CVE-2026-15683
Lorex 2K Indoor Wi-Fi Security Camera Device Management Server Improper Certificate Validation Vulnerability. This vulne
json_repair: Circular JSON Schema `$ref` causes unbounded CPU DoS
## Circular JSON Schema `$ref` causes unbounded CPU DoS in `json_repair` ### Summary `SchemaRepairer.resolve_schema()`