EUVD-2026-14597

OpenClaw versions 2026.2.26 before 2026.3.1 contain a current working directory injection vulnerability in Windows wrapper resolution for .cmd/.bat files that allows shell execution fallback. Attackers can manipulate the current working directory to alter wrapper resolution behavior and achieve...

CVE-2026-31999

OpenClaw versions 2026.2.26 prior to 2026.3.1 on Windows contain a current working directory injection vulnerability in wrapper resolution for .cmd/.bat files that allows attackers to influence execution behavior through cwd manipulation. Remote attackers can exploit improper shell execution...

Malicious code in react-bootstrap-mocha-command-scripts (npm)

The package react-bootstrap-mocha-command-scripts was found to contain malicious code...

MAL-2025-31767 Malicious code in react-bootstrap-mocha-command-scripts (npm)

The package react-bootstrap-mocha-command-scripts was found to contain malicious code...