34019 matches found
CVE-2026-62216
OpenClaw 2026.4.20 before 2026.5.28 contain a policy bypass in the QQBot media upload feature. A lower-trust caller or configured input path could cause the media upload to reach network destinations that should have been blocked by OpenClaw policy server-side request forgery. The practical impac...
EUVD-2026-45104
OpenClaw 2026.4.20 before 2026.5.28 contain a policy bypass in the QQBot media upload feature. A lower-trust caller or configured input path could cause the media upload to reach network destinations that should have been blocked by OpenClaw policy server-side request forgery. The practical impac...
CVE-2026-62210 OpenClaw < 2026.6.1 Denial of Service via Remote Media URLs
OpenClaw versions before 2026.6.1 contain a denial of service vulnerability where remote media URLs can trigger slow-read attacks that exhaust gateway worker resources. Attackers with access to configured input paths can supply remote media URLs that consume gateway resources and reduce...
CVE-2026-62210
OpenClaw before 2026.6.1 is affected by a denial-of-service vulnerability where remote media URLs trigger slow‑read attacks that exhaust gateway worker resources. Attackers with access to configured input paths can supply remote media URLs to consume resources and reduce availability. The issue i...
EUVD-2026-45098
OpenClaw versions before 2026.6.1 contain a denial of service vulnerability where remote media URLs can trigger slow-read attacks that exhaust gateway worker resources. Attackers with access to configured input paths can supply remote media URLs that consume gateway resources and reduce...
CVE-2026-62210
OpenClaw versions before 2026.6.1 contain a denial of service vulnerability where remote media URLs can trigger slow-read attacks that exhaust gateway worker resources. Attackers with access to configured input paths can supply remote media URLs that consume gateway resources and reduce...
CVE-2026-62210 OpenClaw < 2026.6.1 Denial of Service via Remote Media URLs
OpenClaw versions before 2026.6.1 contain a denial of service vulnerability where remote media URLs can trigger slow-read attacks that exhaust gateway worker resources. Attackers with access to configured input paths can supply remote media URLs that consume gateway resources and reduce...
CVE-2026-62210 OpenClaw < 2026.6.1 Denial of Service via Remote Media URLs
OpenClaw versions before 2026.6.1 contain a denial of service vulnerability where remote media URLs can trigger slow-read attacks that exhaust gateway worker resources. Attackers with access to configured input paths can supply remote media URLs that consume gateway resources and reduce...
PT-2026-60626
Name of the Vulnerable Software and Affected Versions OpenClaw versions 2026.4.20 through 2026.5.27 Description A policy bypass exists in the QQBot media upload feature. A lower-trust caller or a configured input path can cause media uploads to reach network destinations that should be blocked by...
PT-2026-60714
Name of the Vulnerable Software and Affected Versions SafePortAgent versions prior to 3.2.5024 StellarProtect versions 3.2.4011 through 5.0.1082 Description An improper access control issue exists in the Removable Media Validation function. A local attacker with administrator privileges can bypas...
OPENSUSE-SU-2026:11292-1 helm3-3.21.3-2.1 on GA media
These are all security issues fixed in the helm3-3.21.3-2.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11304-1 system-user-zabbix-7.0.28-1.1 on GA media
These are all security issues fixed in the system-user-zabbix-7.0.28-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11296-1 opam-2.5.2-1.2 on GA media
These are all security issues fixed in the opam-2.5.2-1.2 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11297-1 oras-1.3.3-2.1 on GA media
These are all security issues fixed in the oras-1.3.3-2.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11294-1 lux-0.24.1-1.1 on GA media
These are all security issues fixed in the lux-0.24.1-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11288-1 blender-5.2-5.2.0-1.1 on GA media
These are all security issues fixed in the blender-5.2-5.2.0-1.1 package on the GA media of openSUSE Tumbleweed...
python315-3.15.0~b3-2.1 on GA media (moderate)
python315-3.15.0b3-2.1 on GA media Announcement ID: openSUSE-SU-2026:11286-1 Rating: moderate Cross-References: CVE-2026-11940 CVSS scores: CVE-2026-11940 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N CVE-2026-11940 SUSE : 8.2...
PT-2026-60620
Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.6.1 Description A denial of service issue exists where remote media URLs can trigger slow-read attacks, which are attacks that keep connections open as long as possible by reading responses very slowly. This...
PT-2026-60789
Dendrite through 0.13.8 contains a server-side request forgery vulnerability that allows unauthenticated attackers to cause the server to open outbound TLS connections to arbitrary hosts and ports by supplying an unvalidated serverName parameter to the legacy media download endpoint. Attackers ca...