OpenClaw: Empty-scope device re-pairing could confuse caller scope containment
CVE-2026-53852
### Summary Empty-scope device re-pairing could confuse caller scope containment. In affected versions, a device re-pai
#severity:low
共收录 1569 条相关情报。
← 返回所有主题OpenClaw: BlueBubbles sender policy could match mutable conversation identifiers
CVE-2026-53860
### Summary BlueBubbles sender policy could match mutable conversation identifiers. In affected versions, a participant
OpenClaw: Skill-command dispatch could skip before-tool-call hooks
CVE-2026-53845
### Summary Skill-command dispatch could skip before-tool-call hooks. In affected versions, a skill command routed thro
OpenClaw: Bootstrap token replay could widen pending pairing scopes
CVE-2026-53862
### Summary Bootstrap token replay could widen pending pairing scopes. In affected versions, a caller with access to a
OpenClaw: Exec allowlist could miss side effects from transparent command wrappers
CVE-2026-53848
### Summary Exec allowlist could miss side effects from transparent command wrappers. In affected versions, a command r
A flaw in Node.js Permission Model enforcement allows Bypass via `process.report.writeReport()`...
CVE-2026-48617
A flaw in Node.js Permission Model enforcement allows Bypass via `process.report.writeReport()` Path Misvalidation. This
snes9x 1.63 allows an out-of-bounds write and denial of service via a crafted .ups file.
CVE-2026-39199
snes9x 1.63 allows an out-of-bounds write and denial of service via a crafted .ups file.
Dell PowerFlex Manager, version(s) [Versions], contain(s) an Improper Neutralization of Special...
CVE-2026-35068
Dell PowerFlex Manager, version(s) [Versions], contain(s) an Improper Neutralization of Special Elements used in an SQL
Pi Agent: Potential XSS in HTML session exports via Markdown URL sanitization bypass
CVE-2026-54326
# Potential XSS in HTML session exports via Markdown URL handling Pi HTML exports render session Markdown into a static
Cross-site scripting via <NoScript> slot content in Nuxt's head components
### Impact Nuxt's globally registered `` component (from `@unhead/vue` head components, re-exported by Nuxt) wrote its
OpenClaw before 2026.5.7 contains a sender policy bypass vulnerability in BlueBubbles that allows...
CVE-2026-53860
OpenClaw before 2026.5.7 contains a sender policy bypass vulnerability in BlueBubbles that allows participants to match
OpenClaw before 2026.5.12 contains a bootstrap token replay vulnerability allowing callers with...
CVE-2026-53862
OpenClaw before 2026.5.12 contains a bootstrap token replay vulnerability allowing callers with pending token access to
OpenClaw before 2026.4.25 contains a scope containment bypass vulnerability in device re-pairing...
CVE-2026-53852
OpenClaw before 2026.4.25 contains a scope containment bypass vulnerability in device re-pairing that allows authenticat
OpenClaw before 2026.5.26 contains an exec allowlist bypass vulnerability allowing authenticated...
CVE-2026-53848
OpenClaw before 2026.5.26 contains an exec allowlist bypass vulnerability allowing authenticated operators to execute wr
OpenClaw before 2026.5.6 contains a hook bypass vulnerability where skill commands routed through...
CVE-2026-53845
OpenClaw before 2026.5.6 contains a hook bypass vulnerability where skill commands routed through the affected dispatch
OpenClaw before 2026.5.12 contains a cross-site scripting vulnerability in exported session HTML...
CVE-2026-53841
OpenClaw before 2026.5.12 contains a cross-site scripting vulnerability in exported session HTML that preserves unsafe j
Nuxt: Dev server discloses project absolute path and persistent workspace UUID via `/.well-known/appspecific/com.chrome.devtools.json`
### Summary When running `nuxt dev`, Nuxt registers an unauthenticated route at `/.well-known/appspecific/com.chrome.de
Starlette: Unvalidated request path concatenated into authority poisons request.url.hostname
CVE-2026-54282
### Summary In affected versions, the HTTP request path is not validated before being used to reconstruct `request.url`
python-multipart: Negative Content-Length in parse_form buffers the entire body in memory
CVE-2026-53540
### Summary `parse_form()` did not validate the `Content-Length` header before using it to bound its chunked read of th
python-multipart: Semicolon treated as querystring field separator enables parameter smuggling
CVE-2026-53538
### Summary `QuerystringParser` treated `;` as a field separator in `application/x-www-form-urlencoded` bodies, in addi