Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low2.0OpenClaw versions prior to 2026.2.19 tools.exec.safeBins contains an input validation bypass vulnerability that allows attackers to execute unintended filesystem opera…Check if you run itEPSS 0.14%Mar 19, 2026
- Medium5.8OpenClaw versions 2026.1.21 prior to 2026.2.19 contain a command injection vulnerability in the Lobster extension's Windows shell fallback mechanism that allows attack…Check if you run itEPSS 0.55%Mar 19, 2026
- Medium6.9OpenClaw versions prior to 2026.2.19 contain a local command injection vulnerability in Windows scheduled task script generation due to unsafe handling of cmd metachar…Check if you run itEPSS 0.59%Mar 19, 2026
- Medium5.7OpenClaw versions prior to 2026.2.22 contain an allowlist parsing mismatch vulnerability in the macOS companion app that allows authenticated operators to bypass exec…Check if you run itEPSS 0.30%Mar 19, 2026
- High7.1OpenClaw versions prior to 2026.2.23 contain an allowlist bypass vulnerability in system.run guardrails that allows authenticated operators to execute unintended commands.Check if you run itEPSS 0.34%Mar 19, 2026
- Low2.0OpenClaw versions prior to 2026.2.26 contain an authorization bypass vulnerability where Signal group allowlist policy incorrectly accepts sender identities from DM pa…Check if you run itEPSS 0.16%Mar 19, 2026
- Medium6.9OpenClaw versions prior to 2026.3.2 contain a vulnerability in the stageSandboxMedia function in which it fails to validate destination symlinks during media staging,…Check if you run itEPSS 0.14%Mar 19, 2026
- Medium5.3OpenClaw versions prior to 2026.3.1 contain a server-side request forgery vulnerability in web_search citation redirect resolution that uses a private-network-allowing SSRF policy.Check if you run itEPSS 0.19%Mar 19, 2026
- Medium5.4OpenClaw 2026.3.1 contains an approval integrity vulnerability in system.run node-host execution where argv rewriting changes command semantics.Check if you run itEPSS 0.14%Mar 19, 2026
- High7.1OpenClaw versions prior to 2026.2.22 contain an authorization bypass vulnerability in allow-always wrapper persistence that allows attackers to bypass approval checks…Check if you run itEPSS 0.45%Mar 19, 2026
- High8.7OpenClaw versions prior to 2026.3.1 contain an unbounded memory growth vulnerability in the Zalo webhook endpoint that allows unauthenticated attackers to trigger in-m…Check if you run itEPSS 0.36%Mar 19, 2026
- Medium6.0OpenClaw versions prior to 2026.2.22 contain an allowlist bypass vulnerability in system.run that allows attackers to execute non-allowlisted commands by splitting com…Check if you run itEPSS 0.46%Mar 19, 2026
- Medium6.3OpenClaw versions prior to 2026.2.25 lack durable replay state for Nextcloud Talk webhook events, allowing valid signed webhook requests to be replayed without suppression.Check if you run itEPSS 0.28%Mar 19, 2026
- Medium5.8OpenClaw versions prior to 2026.3.2 contain a race condition vulnerability in ZIP extraction that allows local attackers to write files outside the intended destination directory.Check if you run itEPSS 0.08%Mar 19, 2026
- High7.1OpenClaw versions prior to 2026.2.22 contain an allowlist bypass vulnerability in system.run exec analysis that fails to unwrap env and shell-dispatch wrapper chains.Check if you run itEPSS 0.43%Mar 19, 2026
- Medium6.9OpenClaw versions prior to 2026.2.19 contain a command injection vulnerability in Windows Scheduled Task script generation where environment variables are written to g…Check if you run itEPSS 0.66%Mar 19, 2026
- Medium6.5PX4 is an open-source autopilot stack for drones and unmanned vehicles.Check if you run itEPSS 0.38%Mar 19, 2026
- High8.6Kan is an open-source project management tool.Patch nowKEVEPSS 26.38%Mar 19, 2026
- Critical9.3Langflow Code Injection VulnerabilityPatch nowKEVEPSS 96.18%Mar 19, 2026
- High8.3Romeo gives the capability to reach high code coverage of Go ≥1.20 apps by helping to measure code coverage for functional and integration tests within GitHub Actions.Check if you run itEPSS 0.45%Mar 18, 2026
- High7.9Romeo gives the capability to reach high code coverage of Go ≥1.20 apps by helping to measure code coverage for functional and integration tests within GitHub Actions.Check if you run itEPSS 0.40%Mar 18, 2026
- Medium4.3The Hytale Modding Wiki is a free service for Hytale mods to host their documentation & wikis.Check if you run itEPSS 0.21%Mar 18, 2026
- Low2.3openapi-to-java-records-mustache-templates allows users to generate Java Records from OpenAPI specifications.Check if you run itEPSS 0.33%Mar 18, 2026
- Critical9.9ApostropheCMS is an open-source content management framework.Check if you run itEPSS 0.54%Mar 18, 2026
- High8.1ApostropheCMS is an open-source content management framework.Check if you run itEPSS 0.38%Mar 18, 2026
Sort