Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/02/20 9:5 p.m.16 views

OpenClaw: Reject symlinks in local skill packaging script

Vulnerability skills/skill-creator/scripts/packageskill.py a local helper script used when authors package skills previously followed symlinks while building .skill archives. If an author runs this script on a crafted local skill directory containing symlinks to files outside the skill root, the...

4.6CVSS5.8AI score0.00221EPSS
SaveExploits0References7Affected Software1
Rows per page
Query Builder