1602 matches found
Origin Validation Error
Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Origin Validation Error via the Slack thread context. An attacker can inject unauthorized messages into the agent context by replying to allowlisted users in Slack threads, thereby...
GHSA-P49J-V9WC-WG57 vulnerabilities
Vulnerabilities for packages: openbao...
GHSA-3QPV-XF3V-MM45
creationtimestamp| type| source ---|---|--- 2026-04-23 23:27:16+00:00| seen| Telegram/IhrbuMncMOQ2aXKn55DBnsRKZnrdzyQXI4i7tcZ3JysOVtE...
GHSA-F228-CHMX-V6J6
creationtimestamp| type| source ---|---|--- 2026-04-23 21:26:14+00:00| published-proof-of-concept| Telegram/LhBAsLXZuywUMfmIXbSwPnWzjb6RJaoGfmWe6gs8QchtB8o...
DNS Rebinding
Overview copilot-api is a Turn GitHub Copilot into OpenAI/Anthropic API compatible server. Usable with Claude Code! Affected versions of this package are vulnerable to DNS Rebinding in ericc-ch copilot-api up to 0.7.0. This impacts an unknown function of the file /token of the component Header...
GHSA-CCCX-M78H-M3XW vulnerabilities
Vulnerabilities for packages: python...
GHSA-39Q2-94RC-95CP vulnerabilities
Vulnerabilities for packages: langfuse, nextcloud-server, opensearch-dashboards...
CVE-2026-41432
creationtimestamp| type| source ---|---|--- 2026-04-22 14:14:22+00:00| published-proof-of-concept| https://github.com/QuantumNous/new-api/security/advisories/GHSA-xff3-5c9p-2mr4...
CVE-2026-44015
creationtimestamp| type| source ---|---|--- 2026-04-22 11:15:44+00:00| published-proof-of-concept| https://github.com/0xJacky/nginx-ui/security/advisories/GHSA-wr32-99hh-6f35...
GHSA-R8FQ-WRFM-CJ2Q
creationtimestamp| type| source ---|---|--- 2026-04-21 21:26:51+00:00| seen| Telegram/FmTSSVQ1J3rSbvAltEePP9EbJsBmWNaUcXM1uvMHIpeiAtQ...
GHSA-Q2QH-V828-R4P7
creationtimestamp| type| source ---|---|--- 2026-04-21 21:26:25+00:00| seen| Telegram/zADwex3kLz9IaLHwxMwQfRAPY0yfg2SR1HrZ5uE72Qmc...
GHSA-J662-9WCJ-MF36
creationtimestamp| type| source ---|---|--- 2026-04-21 21:26:08+00:00| published-proof-of-concept| Telegram/Sh-VDLwDsigv2TtmIHQb5bM9xL-0-hntwqefkM3TigDwq8o...
UNIX Symbolic Link (Symlink) Following
Overview @anthropic-ai/claude-code is an Use Claude, Anthropic's AI assistant, right from your terminal. Claude can understand your codebase, edit files, run terminal commands, and handle entire workflows for you. Affected versions of this package are vulnerable to UNIX Symbolic Link Symlink...
Command Injection
Overview flowsint is an Add your description here Affected versions of this package are vulnerable to Command Injection via the orgtoasn transform process. An attacker can execute arbitrary operating system commands as root on the host machine by supplying shell metacharacters and escaping the...
CVE-2026-42180
creationtimestamp| type| source ---|---|--- 2026-04-20 14:11:48+00:00| published-proof-of-concept| https://api.github.com/repos/LemmyNet/lemmy/security-advisories/GHSA-3jvj-v6w2-h948...
GHSA-44VF-4X73-JV4X vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-X449-4QCH-5WJQ vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-JVCH-X2XH-P75V vulnerabilities
Vulnerabilities for packages: chromium...