Lucene search
+L

2 matches found

OSV
OSV
added 2026/04/09 5:36 p.m.8 views

GHSA-3FV3-6P2V-GXWJ OpenClaw QQ Bot Extension missing SSRF Protection on All Media Fetch Paths

Impact QQ Bot Extension: Missing SSRF Protection on All Media Fetch Paths. QQ Bot media download paths were not consistently routed through the SSRF guard and allowlist policy. OpenClaw is a user-controlled local assistant. This advisory is scoped to the OpenClaw trust model and does not assume a...

5.9CVSS5.8AI score0.00218EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
added 2026/04/09 5:36 p.m.10 views

OpenClaw QQ Bot Extension missing SSRF Protection on All Media Fetch Paths

Impact QQ Bot Extension: Missing SSRF Protection on All Media Fetch Paths. QQ Bot media download paths were not consistently routed through the SSRF guard and allowlist policy. OpenClaw is a user-controlled local assistant. This advisory is scoped to the OpenClaw trust model and does not assume a...

8.5CVSS5.9AI score0.00218EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder