4 matches found
EUVD-2026-81002
Skipper has OPA body-authz bypass: truncatedbody mitigation fails open on chunked/HTTP-2 incomplete fix GHSA-8qqm-fp2q-v734...
Incorrect Authorization
Overview Affected versions of this package are vulnerable to Incorrect Authorization through ExtractHttpBodyOptionally in filters/openpolicyagent/openpolicyagent.go and AdaptToExtAuthRequest in filters/openpolicyagent/internal/envoy/skipperadapter.go. An attacker can get an oversized request body...
OpenClaw: Remote media error responses could trigger unbounded memory allocation before failure
Summary Remote media HTTP error bodies were read without a hard size cap before failure handling, allowing unbounded allocation on error responses. Affected Packages / Versions - Package: openclaw npm - Affected: = 2026.3.22 - Latest released tag checked: v2026.3.23-2...
