18491 matches found
CVE-2026-34511 OpenClaw < 2026.4.2 - PKCE Verifier Exposure via OAuth State Parameter
OpenClaw before 2026.4.2 reuses the PKCE verifier as the OAuth state parameter in the Gemini OAuth flow, exposing it through the redirect URL. Attackers who capture the redirect URL can obtain both the authorization code and PKCE verifier, defeating PKCE protection and enabling token redemption...
GHSA-QR99-7898-VR7C
creationtimestamp| type| source ---|---|--- 2026-04-03 19:24:00+00:00| published-proof-of-concept| Telegram/l2CWtN20f6D8WOiAClhqJgrdc6BQljDZCBDw2ZgpHM67Hss...
GHSA-8PRR-286P-4W7J
creationtimestamp| type| source ---|---|--- 2026-04-03 19:24:00+00:00| published-proof-of-concept| Telegram/l2CWtN20f6D8WOiAClhqJgrdc6BQljDZCBDw2ZgpHM67Hss...
CVE-2026-34400
creationtimestamp| type| source ---|---|--- 2026-04-03 19:24:00+00:00| published-proof-of-concept| Telegram/l2CWtN20f6D8WOiAClhqJgrdc6BQljDZCBDw2ZgpHM67Hss...
GHSA-67JX-R9PV-98RJ
creationtimestamp| type| source ---|---|--- 2026-04-03 19:24:00+00:00| published-proof-of-concept| Telegram/l2CWtN20f6D8WOiAClhqJgrdc6BQljDZCBDw2ZgpHM67Hss...
GHSA-FCM4-4PJ2-M5HF
creationtimestamp| type| source ---|---|--- 2026-04-03 17:26:47+00:00| published-proof-of-concept| Telegram/CfZ2Rt5oDMh5hfP6-7c66YyHAz2lNtcnTrevEl4rY2ivCc...
GHSA-GP5X-2V54-V2Q5
creationtimestamp| type| source ---|---|--- 2026-04-03 17:26:47+00:00| published-proof-of-concept| Telegram/CfZ2Rt5oDMh5hfP6-7c66YyHAz2lNtcnTrevEl4rY2ivCc...
GHSA-2WFH-RCWF-WH23
creationtimestamp| type| source ---|---|--- 2026-04-03 17:26:47+00:00| published-proof-of-concept| Telegram/CfZ2Rt5oDMh5hfP6-7c66YyHAz2lNtcnTrevEl4rY2ivCc...
GHSA-GJW9-34GF-RP6M
creationtimestamp| type| source ---|---|--- 2026-04-03 17:26:40+00:00| published-proof-of-concept| Telegram/DJsg5Qi7j92DgCP14lqfeXU4IPClBfbIww0fpCMr4ueipk0...
GHSA-HP5W-3HXX-VMWF
creationtimestamp| type| source ---|---|--- 2026-04-03 17:26:40+00:00| published-proof-of-concept| Telegram/DJsg5Qi7j92DgCP14lqfeXU4IPClBfbIww0fpCMr4ueipk0...
GHSA-538C-55JV-C5G9
creationtimestamp| type| source ---|---|--- 2026-04-03 17:26:40+00:00| published-proof-of-concept| Telegram/DJsg5Qi7j92DgCP14lqfeXU4IPClBfbIww0fpCMr4ueipk0...
GHSA-RWW4-4W9C-7733
creationtimestamp| type| source ---|---|--- 2026-04-03 17:26:40+00:00| published-proof-of-concept| Telegram/DJsg5Qi7j92DgCP14lqfeXU4IPClBfbIww0fpCMr4ueipk0...
GHSA-245V-P8FJ-VWM2
creationtimestamp| type| source ---|---|--- 2026-04-03 17:26:40+00:00| published-proof-of-concept| Telegram/DJsg5Qi7j92DgCP14lqfeXU4IPClBfbIww0fpCMr4ueipk0...
GHSA-W3WC-44P4-M4J7
creationtimestamp| type| source ---|---|--- 2026-04-03 17:26:14+00:00| published-proof-of-concept| Telegram/ycWx5Vj-wYUL0P5R2C1zZYk0HaTfy6prCoTNEJeY1xTJx8...
GHSA-42X7-VVJ4-4CJ3
creationtimestamp| type| source ---|---|--- 2026-04-03 17:26:14+00:00| published-proof-of-concept| Telegram/ycWx5Vj-wYUL0P5R2C1zZYk0HaTfy6prCoTNEJeY1xTJx8...
GHSA-J8RJ-FMPV-WCXW
creationtimestamp| type| source ---|---|--- 2026-04-03 17:26:14+00:00| published-proof-of-concept| Telegram/ycWx5Vj-wYUL0P5R2C1zZYk0HaTfy6prCoTNEJeY1xTJx8...
CVE-2026-34076
creationtimestamp| type| source ---|---|--- 2026-04-03 17:26:14+00:00| published-proof-of-concept| Telegram/ycWx5Vj-wYUL0P5R2C1zZYk0HaTfy6prCoTNEJeY1xTJx8...
GHSA-9WHH-MFFV-XVH6
creationtimestamp| type| source ---|---|--- 2026-04-03 17:26:14+00:00| published-proof-of-concept| Telegram/ycWx5Vj-wYUL0P5R2C1zZYk0HaTfy6prCoTNEJeY1xTJx8...