71 matches found
chutes (>=0.0.8, <=0.4.3rc2), modelaudit (>=0.2.6, <=0.2.24) potentially affected by CVE-2026-22608 via fickling (>=0.1.3, <=0.1.6)
fickling PYPI version =0.1.3, =0.0.8, =0.2.6, =0.2.24 Source cves: CVE-2026-22608 Source advisory: OSV:PYSEC-2026-1369...
chutes (>=0.0.8, <=0.4.3rc2), modelaudit (>=0.2.6, <=0.2.24) potentially affected by CVE-2026-22612 via fickling (>=0.1.3, <=0.1.6)
fickling PYPI version =0.1.3, =0.0.8, =0.2.6, =0.2.24 Source cves: CVE-2026-22612 Source advisory: OSV:PYSEC-2026-1370...
chutes (>=0.0.8, <=0.4.3rc2), modelaudit (>=0.2.6, <=0.2.24) potentially affected by CVE-2026-22607 via fickling (>=0.1.3, <=0.1.6)
fickling PYPI version =0.1.3, =0.0.8, =0.2.6, =0.2.24 Source cves: CVE-2026-22607 Source advisory: OSV:PYSEC-2026-1371...
chutes (>=0.0.8, <=0.4.3rc2), modelaudit (>=0.2.6, <=0.2.24) potentially affected by CVE-2026-22609 via fickling (>=0.1.3, <=0.1.6)
fickling PYPI version =0.1.3, =0.0.8, =0.2.6, =0.2.24 Source cves: CVE-2026-22609 Source advisory: OSV:PYSEC-2026-1372...
chutes (>=0.0.8, <=0.4.3rc2), modelaudit (>=0.2.6, <=0.2.24) potentially affected by CVE-2026-22606 via fickling (>=0.1.3, <=0.1.6)
fickling PYPI version =0.1.3, =0.0.8, =0.2.6, =0.2.24 Source cves: CVE-2026-22606 Source advisory: OSV:PYSEC-2026-1373...
chutes (>=0.0.8, <=0.4.3rc2), modelaudit (>=0.2.6, <=0.2.23) potentially affected by CVE-2025-67747 via fickling (>=0.1.3, <=0.1.4)
fickling PYPI version =0.1.3, =0.0.8, =0.2.6, =0.2.23 Source cves: CVE-2025-67747 Source advisory: OSV:PYSEC-2026-1368...
chutes (>=0.0.8, <=0.4.3rc2), modelaudit (>=0.2.6, <=0.2.24) potentially affected by CVE-2026-14535 via fickling (>=0.1.3, <=0.1.6)
fickling PYPI version =0.1.3, =0.0.8, =0.2.6, =0.2.24 Source cves: CVE-2026-14535 Source advisory: SNYK:PYTHON-FICKLING-17816995...
chutes (>=0.0.8, <=0.4.3rc2), modelaudit (>=0.2.6, <=0.2.24) potentially affected by CVE-2026-14534 via fickling (>=0.1.3, <=0.1.6)
fickling PYPI version =0.1.3, =0.0.8, =0.2.6, =0.2.24 Source cves: CVE-2026-14534 Source advisory: SNYK:PYTHON-FICKLING-17816996...
chutes (>=0.0.8, <=0.4.3rc2), modelaudit (>=0.2.6, <=0.2.24) potentially affected by CVE-2026-14535 via fickling (>=0.1.3, <=0.1.6)
fickling PYPI version =0.1.3, =0.0.8, =0.2.6, =0.2.24 Source cves: CVE-2026-14535 Source advisory: OSV:PYSEC-2026-2150...
chutes (>=0.0.8, <=0.4.3rc2), modelaudit (>=0.2.6, <=0.2.24) potentially affected by CVE-2026-14534 via fickling (>=0.1.3, <=0.1.6)
fickling PYPI version =0.1.3, =0.0.8, =0.2.6, =0.2.24 Source cves: CVE-2026-14534 Source advisory: OSV:PYSEC-2026-2149...
chutes (>=0.0.8, <=0.4.3rc2), modelaudit (>=0.2.6, <=0.2.24) potentially affected by CVE-2026-14535 via fickling (>=0.1.3, <=0.1.6)
fickling PYPI version =0.1.3, =0.0.8, =0.2.6, =0.2.24 Source cves: CVE-2026-14535 Source advisory: MEND:CVE-2026-14535...
chutes (>=0.0.8, <=0.4.3rc2), modelaudit (>=0.2.6, <=0.2.24) potentially affected by CVE-2026-14534 via fickling (>=0.1.3, <=0.1.6)
fickling PYPI version =0.1.3, =0.0.8, =0.2.6, =0.2.24 Source cves: CVE-2026-14534 Source advisory: MEND:CVE-2026-14534...
chutes (>=0.0.8, <=0.4.3rc2), modelaudit (>=0.2.6, <=0.2.24) potentially affected by unknown CVE via fickling (>=0.1.3, <=0.1.6)
fickling PYPI version =0.1.3, =0.0.8, =0.2.6, =0.2.24 Source cves: unknown CVE Source advisory: GHSA-5CXW-W2XG-2M8H...
chutes (>=0.0.8, <=0.4.3rc2), modelaudit (>=0.2.6, <=0.2.24) potentially affected by unknown CVE via fickling (>=0.1.3, <=0.1.6)
fickling PYPI version =0.1.3, =0.0.8, =0.2.6, =0.2.24 Source cves: unknown CVE Source advisory: OSV:GHSA-5CXW-W2XG-2M8H...
chutes (>=0.0.8, <=0.4.3rc2), modelaudit (>=0.2.6, <=0.2.24) potentially affected by unknown CVE via fickling (>=0.1.3, <=0.1.6)
fickling PYPI version =0.1.3, =0.0.8, =0.2.6, =0.2.24 Source cves: unknown CVE Source advisory: OSV:GHSA-R48F-3986-4F9C...
CVE-2026-28477
OpenClaw versions prior to 2026.2.14 contain an oauth state validation bypass vulnerability in the manual Chutes login flow that allows attackers to bypass CSRF protection. An attacker can convince a user to paste attacker-controlled OAuth callback data, enabling credential substitution and token...
CVE-2026-28477
OpenClaw versions prior to 2026.2.14 contain an oauth state validation bypass vulnerability in the manual Chutes login flow that allows attackers to bypass CSRF protection. An attacker can convince a user to paste attacker-controlled OAuth callback data, enabling credential substitution and token...
CVE-2026-28477 OpenClaw < 2026.2.14 - OAuth State Validation Bypass in Manual Chutes Login Flow
OpenClaw versions prior to 2026.2.14 contain an oauth state validation bypass vulnerability in the manual Chutes login flow that allows attackers to bypass CSRF protection. An attacker can convince a user to paste attacker-controlled OAuth callback data, enabling credential substitution and token...
EUVD-2026-9923
OpenClaw versions prior to 2026.2.14 contain an oauth state validation bypass vulnerability in the manual Chutes login flow that allows attackers to bypass CSRF protection. An attacker can convince a user to paste attacker-controlled OAuth callback data, enabling credential substitution and token...
CVE-2026-28477 OpenClaw < 2026.2.14 - OAuth State Validation Bypass in Manual Chutes Login Flow
OpenClaw versions prior to 2026.2.14 contain an oauth state validation bypass vulnerability in the manual Chutes login flow that allows attackers to bypass CSRF protection. An attacker can convince a user to paste attacker-controlled OAuth callback data, enabling credential substitution and token...