Lucene search
+L

1 matches found

OSV
OSV
added 2026/03/12 2:21 p.m.5 views

GHSA-V8CG-4474-49V8 OpenClaw: Slack system events bypass sender authorization in member and message subtype handlers

Summary Slack member and message subtype system events messagechanged, messagedeleted, threadbroadcast were not consistently enforcing sender authorization before enqueueing system events. Affected Packages / Versions - Package: openclaw npm - Latest published version: 2026.2.25 - Affected range:...

5.4CVSS5.8AI score0.0018EPSS
SaveExploits0References5
Rows per page
Query Builder