OpenClaw's Signal reaction-only status events could, in limited cases, be enqueued before access checks

Summary In a narrow Signal reaction-notification path, reaction-only inbound events could enqueue a status event before sender access checks were applied. Affected Packages / Versions - Package: openclaw npm - Affected: = 2026.2.24 latest published at patch time - Fixed: 2026.2.25 Details In the...

X (Formerly Twitter): xss in DM group name in twitter

hi, found a xss on twitter Steps 1. Create a DM group with payload alert1;// 2. Whenever anybody shares a tweet via DM, XSS will popup POC https://youtu.be/P2Ram2FBAS4...