CVE-2026-25157 OpenClaw/Clawdbot has OS Command Injection via Project Root Path in sshNodeCommand

OpenClaw is a personal AI assistant. Prior to version 2026.1.29, there is an OS command injection vulnerability via the Project Root Path in sshNodeCommand. The sshNodeCommand function constructed a shell script without properly escaping the user-supplied project path in an error message. When th...

ada-url:parse: Crash in bool ada::url_aggregator::set_host_or_hostname<true>

Detailed Report: https://oss-fuzz.com/testcase?key=5329718332489728 Project: ada-url Fuzzing Engine: centipede Fuzz Target: parse Job Type: centipedeasanada-url Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x60b000060000 Crash State: bool ada::urlaggregator::sethostorhostname...