CVE-2026-26323: Improper Neutralization of Special Elements used in an OS Command

OpenClaw is a personal AI assistant. Versions 2026.1.8 through 2026.2.13 have a command injection in the maintainer/dev script scripts/update-clawtributors.ts. The issue affects contributors/maintainers or CI who run bun scripts/update-clawtributors.ts in a source checkout that contains a malicio...

MAL-2025-34078 Malicious code in stream-fermiparadox-scripts-update (npm)

The package stream-fermiparadox-scripts-update was found to contain malicious code...

Malicious code in stream-fermiparadox-scripts-update (npm)

The package stream-fermiparadox-scripts-update was found to contain malicious code...

UBUNTU-CVE-2021-32642

radsecproxy is a generic RADIUS proxy that supports both UDP and TLS RadSec RADIUS transports. Missing input validation in radsecproxy's naptr-eduroam.sh and radsec-dynsrv.sh scripts can lead to configuration injection via crafted radsec peer discovery DNS records. Users are subject to Informatio...