@agentholdings/agent-passport (=0.1.0), @flomesh/ztm-chat (>=2026.3.25 <=2026.3.26) +10 more potentially affected by CVE-2026-35641 via openclaw (>=2026.3.22 <=2026.3.24-beta.2)

openclaw NPM version =2026.3.22, =2026.3.25, =2026.3.24-3, =0.14.39, =0.1.1, =2.0.1, =0.0.7, =0.14.6, =0.1.0, =0.1.5 Source cves: CVE-2026-35641 Source advisory: SNYK:JS-OPENCLAW-15857116...

CVE-2026-35641

creationtimestamp| type| source ---|---|--- 2026-03-30 18:52:09+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-m3mh-3mpg-37hw 2026-04-10 19:30:36+00:00| published-proof-of-concept| Telegram/-hUuw8aTFVWSQYPf3qEKqcT3Zmmt4K4bisrN5sFAqL07rbc 2026-04-11 09:00:08+00:00| seen|...

EUVD-2025-35641

Not used...

MAL-2025-35641 Malicious code in test-mlw2-label-spink-snide-abbot (npm)

The package test-mlw2-label-spink-snide-abbot was found to contain malicious code...

CVE-2024-35641

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in GregRoss Just Writing Statistics allows Stored XSS.This issue affects Just Writing Statistics: from n/a through 4.5...

CVE-2024-35641

CVE-2024-35641 affects WordPress plugin Just Writing Statistics (versions

CVE-2024-35641 WordPress Just Writing Statistics plugin <= 4.5 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in GregRoss Just Writing Statistics allows Stored XSS.This issue affects Just Writing Statistics: from n/a through 4.5...

WordPress Just Writing Statistics Plugin <= 4.5 is vulnerable to Cross Site Scripting (XSS)

Software Just Writing Statistics Type Plugin Vulnerable versions = 4.5 Fixed in 4.6 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-35641 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID aff2fde53c0c Credits Rayhan Ramdhany Hanaputra Required...

CVE-2023-35641

creationtimestamp| type| source ---|---|--- 2023-12-13 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1182...

Microsoft releases lightest Patch Tuesday in three years, no zero-days disclosed

Microsofts monthly security update released Tuesday is the companys lightest in four years, including only 33 vulnerabilities. Perhaps more notable is that there are no zero-day vulnerabilities included in Decembers Patch Tuesday, a rarity for Microsoft this year. The companys regular set of...

CVE-2023-35641

Internet Connection Sharing ICS Remote Code Execution Vulnerability...

CVE-2023-35641

Internet Connection Sharing ICS Remote Code Execution Vulnerability...

CVE-2023-35641

CVE-2023-35641 is an Internet Connection Sharing (ICS) remote code execution in Windows. Connected sources confirm affected component (Windows ICS) and classify the impact as remote code execution with the attacker needing adjacent network access, no user interaction, and no privileges required (...

CVE-2023-35641 Internet Connection Sharing (ICS) Remote Code Execution Vulnerability

...

Rocky Linux 8 : mysql:8.0 (RLSA-2022:7119)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2022:7119 advisory. mysql: Server: DML multiple unspecified vulnerabilities CVE-2021-2478, CVE-2021-2479, CVE-2021-35591, CVE-2021-35607, CVE-2022-21301, CVE-2022-21413...

RHEL 8 : mysql:8.0 (RHSA-2022:7119)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:7119 advisory. MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon mysqld and many client programs and...

AlmaLinux 8 : mysql:8.0 (ALSA-2022:7119)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2022:7119 advisory. mysql: Server: DML multiple unspecified vulnerabilities CVE-2021-2478, CVE-2021-2479, CVE-2021-35591, CVE-2021-35607, CVE-2022-21301, CVE-2022-21413 mysql...

CentOS 8 : mysql:8.0 (CESA-2022:7119)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2022:7119 advisory. - mysql: Server: DML unspecified vulnerability CPU Oct 2021 CVE-2021-2478, CVE-2021-2479, CVE-2021-35591, CVE-2021-35607 - mysql: Server: Optimizer...

CVE-2021-35641 affecting package mysql for versions less than 8.0.28-1

CVE-2021-35641 affecting package mysql for versions less than 8.0.28-1. An upgraded version of the package is available that resolves this issue...

Photon OS 3.0: Mysql PHSA-2021-3.0-0327

An update of the mysql package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-3.0-0327. The text itself is copyright C VMware, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if descripti...