Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.7OpenClaw versions prior to 2026.2.25 contain a symlink traversal vulnerability in the agents.files.get and agents.files.set methods that allows reading and writing fil…Check if you run itEPSS 0.66%Mar 19, 2026
- High8.7OpenClaw versions prior to 2026.3.2 contain a denial of service vulnerability in webhook handlers for BlueBubbles and Google Chat that parse request bodies before perf…Check if you run itEPSS 0.42%Mar 19, 2026
- Medium5.8OpenClaw versions prior to 2026.2.22 contain an allowlist bypass vulnerability in the safe-bin configuration when sort is manually added to tools.exec.safeBins.Check if you run itEPSS 0.30%Mar 19, 2026
- High7.0OpenClaw versions prior to 2026.2.24 contain a policy bypass vulnerability in the safeBins allowlist evaluation that trusts static default directories including writab…Check if you run itEPSS 0.14%Mar 19, 2026
- High7.1OpenClaw versions prior to 2026.2.21 contain an improper URL scheme validation vulnerability in the assertBrowserNavigationAllowed() function that allows authenticated…Check if you run itEPSS 0.42%Mar 19, 2026
- High7.6OpenClaw versions prior to 2026.2.23 contain a path traversal vulnerability in the experimental apply_patch tool that allows attackers with sandbox access to modify fi…Check if you run itEPSS 0.38%Mar 19, 2026
- Low2.3OpenClaw versions prior to 2026.2.26 contain an authorization bypass vulnerability where DM pairing-store identities are incorrectly treated as group allowlist identit…Check if you run itEPSS 0.31%Mar 19, 2026
- High7.6OpenClaw versions prior to 2026.2.25 fail to enforce sender authorization checks for interactive callbacks including block_action, view_submission, and view_closed in…Check if you run itEPSS 0.29%Mar 19, 2026
- High8.3OpenClaw versions prior to 2026.3.2 contain an authentication bypass vulnerability in the /api/channels route classification due to canonicalization depth mismatch bet…Check if you run itEPSS 0.31%Mar 19, 2026
- High7.5OpenClaw versions prior to 2026.2.22 contain an environment variable injection vulnerability in the system.run function that allows attackers to bypass command allowli…Check if you run itEPSS 0.55%Mar 19, 2026
- Medium6.0OpenClaw versions prior to 2026.2.23 contain a sandbox bypass vulnerability in the sandboxed image tool that fails to enforce tools.fs.workspaceOnly restrictions on mo…Check if you run itEPSS 0.33%Mar 19, 2026
- Medium5.3OpenClaw versions prior to 2026.2.22 contain an authentication bypass vulnerability that allows clients authenticated with a shared gateway token to connect as role=no…Check if you run itEPSS 0.28%Mar 19, 2026
- Low2.4OpenWrt Project is a Linux operating system targeting embedded devices.Check if you run itEPSS 0.54%Mar 19, 2026
- Critical9.5OpenWrt Project is a Linux operating system targeting embedded devices.Check if you run itEPSS 2.31%Mar 19, 2026
- Critical9.5OpenWrt Project is a Linux operating system targeting embedded devices.Check if you run itEPSS 1.26%Mar 19, 2026
- High8.2Discourse is an open-source discussion platform.Check if you run itEPSS 0.24%Mar 19, 2026
- Low2.3Discourse is an open-source discussion platform.Check if you run itEPSS 0.34%Mar 19, 2026
- Medium6.9Discourse is an open-source discussion platform.Check if you run itEPSS 0.32%Mar 19, 2026
- Medium6.9Discourse is an open-source discussion platform.Check if you run itEPSS 0.28%Mar 19, 2026
- High8.7Discourse is an open-source discussion platform.Check if you run itEPSS 1.19%Mar 19, 2026
- High7.5VU#948176: Multiple TLS Libraries can Bypass Delegation EnforcementCheck if you run itEPSS 0.29%Mar 19, 2026
- Low1.2An integer overflow vulnerability existed in the static function wolfssl_add_to_chain, that caused heap corruption when certificate data was written out of bounds of a…Check if you run itEPSS 0.07%Mar 19, 2026
- Critical9.1SiYuan is a personal knowledge management system.Check if you run itEPSS 0.44%Mar 19, 2026
- Medium4.9SiYuan is a personal knowledge management system.Check if you run itEPSS 0.43%Mar 19, 2026
- High8.6SQLBot is an intelligent data query system based on a large language model and RAG.Check if you run itEPSS 0.58%Mar 19, 2026
Sort