EUVD-2026-62196

Streambert is a cross-platform Electron Desktop App to stream and download video content. Prior to version 2.6.0, the open-external IPC handler in src/ipc/downloads.js passes a renderer-supplied url directly to Electron's shell.openExternal without validating its protocol. A compromised renderer...

@0xwork/connect (>=0.1.8, <=0.1.9), @chrysb/alphaclaw (>=0.8.7, <=0.9.18) +10 more potentially affected by CVE-2026-62196 via openclaw (>=2026.4.5, <=2026.6.5)

openclaw NPM version =2026.4.5, =0.1.8, =0.8.7, =2.2.4, =4.0.0, =0.2.5, =1.1.50, =2.1.8, =0.1.0, =0.1.38, =1.0.0, =1.3.1 Source cves: CVE-2026-62196 Source advisory: SNYK:JS-OPENCLAW-17970207...

CVE-2026-62196

creationtimestamp| type| source ---|---|--- 2026-07-13 23:25:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqktoai2dm2x 2026-07-15 09:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mqogckmhcq2h...

@0xwork/connect (>=0.1.8, <=0.1.9), @chrysb/alphaclaw (>=0.8.7, <=0.9.18) +10 more potentially affected by CVE-2026-62196 via openclaw (>=2026.4.5, <=2026.6.5)

openclaw NPM version =2026.4.5, =0.1.8, =0.8.7, =2.2.4, =4.0.0, =0.2.5, =1.1.50, =2.1.8, =0.1.0, =0.1.38, =1.0.0, =1.3.1 Source cves: CVE-2026-62196 Source advisory: MEND:CVE-2026-62196...