GHSA-3C6J-HQ33-3JV4 OpenClaw: Paired nodes could forge exec lifecycle events without system.run provenance

Summary OpenClaw nodes send lifecycle events back to the gateway. In affected releases, a paired node could send an exec lifecycle event that was accepted without enough provenance tying it to an authorized system.run request. This issue affects the node event boundary. It does not allow an...

CVE-2026-56037

creationtimestamp| type| source ---|---|--- 2026-07-02 15:16:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpod7g7p552a...

CVE-2026-54259

creationtimestamp| type| source ---|---|--- 2026-07-02 14:35:27+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpoaw3jyg32y 2026-07-03 13:22:59+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqndfs6nq2f...

CVE-2026-55793

creationtimestamp| type| source ---|---|--- 2026-07-02 14:29:28+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpoaley52l2b 2026-07-06 22:35:07+00:00| published-proof-of-concept| https://github.com/craftcms/cms/security/advisories/GHSA-xrqc-p465-2xvg 2026-07-07 01:42:10+00:00|...

CVE-2026-52186

creationtimestamp| type| source ---|---|--- 2026-07-02 14:25:54+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpoaez6hty2i 2026-07-02 21:19:59+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mpoxjh46wi2i 2026-07-03 09:09:41+00:00| seen|...

PYSEC-2026-664 Matrix Synapse Security Filtering Flaw

The ongetmissingevents function in handlers/federation.py in Matrix Synapse before 0.31.1 has a security bug in the getmissingevents federation API where event visibility rules were not applied correctly...

CVE-2026-14340

creationtimestamp| type| source ---|---|--- 2026-07-02 12:52:01+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpo354zv2w2w...

CVE-2026-57761

creationtimestamp| type| source ---|---|--- 2026-07-02 12:08:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpnypoe2ob26 2026-07-03 00:49:14+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mppd7mcewg2k...

CVE-2026-57757

creationtimestamp| type| source ---|---|--- 2026-07-02 12:06:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpnyl6xuvb2m 2026-07-03 00:44:27+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mppcx2xsum2a 2026-07-03 00:44:31+00:00| seen|...

CVE-2026-14363

creationtimestamp| type| source ---|---|--- 2026-07-02 11:57:31+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpny3ojzfa2d...

CVE-2026-13801

creationtimestamp| type| source ---|---|--- 2026-07-02 07:19:06+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260702 2026-07-02 11:40:44+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpnx5nmkxq2d 2026-07-06 07:15:17+00:00| seen|...

CVE-2026-12891

creationtimestamp| type| source ---|---|--- 2026-07-02 05:58:10+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpndz4av2p2d...

CVE-2026-56151

creationtimestamp| type| source ---|---|--- 2026-07-02 04:42:40+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpn7s3vsxy2i 2026-07-02 07:47:29+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpnk4lioa22d 2026-07-02 13:50:27+00:00| seen|...

CVE-2026-13984

creationtimestamp| type| source ---|---|--- 2026-07-02 04:25:22+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpn6t6iksx2i 2026-07-02 07:48:16+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260702 2026-07-03 06:31:05+00:00| seen|...

CVE-2026-13131

creationtimestamp| type| source ---|---|--- 2026-07-02 04:04:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpn5ojkd3z2n 2026-07-02 06:39:02+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mpngc6ibbf2o 2026-07-02 18:25:41+00:00| seen|...

CVE-2026-13783

creationtimestamp| type| source ---|---|--- 2026-07-02 03:38:26+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpn47ankxq2d 2026-07-02 07:18:27+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260702 2026-07-02 08:58:26+00:00| seen|...

CVE-2026-6682

creationtimestamp| type| source ---|---|--- 2026-07-02 00:31:32+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmrqzzxlb2t 2026-07-02 02:18:26+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmxq7gpnk2y 2026-07-02 08:10:23+00:00| seen|...

CVE-2026-14426

creationtimestamp| type| source ---|---|--- 2026-07-02 00:26:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpmrhosyk42m 2026-07-02 03:00:27+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mpn23cu2at2k 2026-07-02 08:27:23+00:00| seen|...

PT-2026-55290

Name of the Vulnerable Software and Affected Versions LobeChat versions prior to 2.2.10-canary.15 Description An authenticated attacker can cause a regular expression denial of service ReDoS by providing a catastrophic-backtracking pattern in a GitHub repository URL path during skill import. This...

CVE-2026-14032

creationtimestamp| type| source ---|---|--- 2026-07-01 23:49:05+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmpf55o3g2l 2026-07-02 07:50:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260702 2026-07-02 18:53:11+00:00| seen|...