Missing Authentication for Critical Function

Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the plugin subagent runtime dispatch gateway methods. An attacker can gain unauthorized administrative access by sending unauthenticated...

org.jenkins-ci.plugins:cloudbees-plugin-gateway (>=1.11, <=4.2) potentially affected by CVE-2024-47805 via org.jenkins-ci.plugins:credentials (1.3.1)

org.jenkins-ci.plugins:credentials MAVEN version 1.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:credentials and may be impacted: - org.jenkins-ci.plugins:cloudbees-plugin-gateway =1.11, =4.2 Source cves: CVE-2024-47805...

org.jenkins-ci.plugins:cloudbees-plugin-gateway (>=1.11, <=4.2) potentially affected by CVE-2019-10320 via org.jenkins-ci.plugins:credentials (1.3.1)

org.jenkins-ci.plugins:credentials MAVEN version 1.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:credentials and may be impacted: - org.jenkins-ci.plugins:cloudbees-plugin-gateway =1.11, =4.2 Source cves: CVE-2019-10320...