Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
•added 2026/02/20 9:05 p.m.•26 views

OpenClaw: Reject symlinks in local skill packaging script

Vulnerability skills/skill-creator/scripts/packageskill.py a local helper script used when authors package skills previously followed symlinks while building .skill archives. If an author runs this script on a crafted local skill directory containing symlinks to files outside the skill root, the...

4.6CVSS6AI score0.00232EPSS
SaveExploits0References7Affected Software1
Rows per page
Query Builder