Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
•added 2026/02/18 12:46 a.m.•18 views

OpenClaw has a command injection in maintainer clawtributors updater

Summary Command injection in the maintainer/dev script scripts/update-clawtributors.ts. Impact Affects contributors/maintainers or CI who run bun scripts/update-clawtributors.ts in a source checkout that contains a malicious commit author email e.g. crafted @users.noreply.github.com values. Norma...

8.8CVSS6.4AI score0.02131EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder