Lucene search
+L

1 matches found

osv_ghsa
osv_ghsa
•added 2026/03/12 2:21 p.m.•22 views

GHSA-V8CG-4474-49V8 OpenClaw: Slack system events bypass sender authorization in member and message subtype handlers

Summary Slack member and message subtype system events messagechanged, messagedeleted, threadbroadcast were not consistently enforcing sender authorization before enqueueing system events. Affected Packages / Versions - Package: openclaw npm - Latest published version: 2026.2.25 - Affected range:...

5.4CVSS5.8AI score0.00307EPSS
SaveExploits0References5
Rows per page
Query Builder