Lucene search
+L

7 matches found

OSV
OSV
added 2026/02/18 12:46 a.m.6 views

GHSA-M7X8-2W3W-PR42 OpenClaw has a command injection in maintainer clawtributors updater

Summary Command injection in the maintainer/dev script scripts/update-clawtributors.ts. Impact Affects contributors/maintainers or CI who run bun scripts/update-clawtributors.ts in a source checkout that contains a malicious commit author email e.g. crafted @users.noreply.github.com values. Norma...

8.6CVSS5.9AI score0.01709EPSS
SaveExploits0References5
Rows per page
Query Builder