Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/02/18 10:44 p.m.14 views

OpenClaw hardened the skill download target directory validation

Affected Packages / Versions - Package: openclaw npm - Affected versions: = 2026.2.14 - Fixed in: planned release 2026.2.15 Impact A bug in download skill installation allowed targetDir values from skill frontmatter to resolve outside the per-skill tools directory if not strictly validated. In th...

6.8CVSS5.4AI score0.00166EPSS
SaveExploits0References6Affected Software1
Rows per page
Query Builder