88290 matches found
CVE-2026-23136
creationtimestamp| type| source ---|---|--- 2026-04-03 15:22:19+00:00| seen| Telegram/GirSXfYk6qmo0VkezaSMDEKvqn4iGVO7FR9G1cahi8frg 2026-05-07 14:35:11+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mlbgryvtcx2q 2026-05-07 20:00:00+00:00| seen|...
CVE-2026-23139
creationtimestamp| type| source ---|---|--- 2026-04-03 15:22:19+00:00| seen| Telegram/GirSXfYk6qmo0VkezaSMDEKvqn4iGVO7FR9G1cahi8frg 2026-05-07 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/redhat-linux-kernel-multiple-vulnerabilities20260508 2026-06-01 18:00:00+00:00| seen|...
CVE-2024-23700
creationtimestamp| type| source ---|---|--- 2026-04-03 15:00:07+00:00| published-proof-of-concept| Telegram/PYoXNzyZrYaKFbj-BEEJp3q5SxJy9E0IbGus7zdCQfw4dWs 2026-04-05 11:00:11+00:00| published-proof-of-concept| Telegram/8vzcCevq7DscPANEyg5vRl2DfT9nGlfXbeJQxDgqAcaPV0Q 2026-04-05 15:00:08+00:00|...
GHSA-7429-HXCV-268M
creationtimestamp| type| source ---|---|--- 2026-04-03 07:15:40+00:00| seen| Telegram/A5UZ2oyBVNNJX5Wa4LER5v-0-0dFFVXEqLDkZYQngP9k5Q...
Incorrect Permission Assignment for Critical Resource
Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Incorrect Permission Assignment for Critical Resource due to improper migration of allowFrom trust settings from the default account to all named accounts during the Telegram legacy...
OpenClaw: Telegram legacy allowFrom migration fans default-account trust into all named accounts
Summary Telegram legacy allowFrom migration fans default-account trust into all named accounts Current Maintainer Triage - Status: open - Normalized severity: low - Assessment: Shipped v2026.3.28 Telegram migration fans legacy default-account allowFrom trust into named accounts, which is an...
GHSA-F693-58PC-2GFR OpenClaw: Telegram legacy allowFrom migration fans default-account trust into all named accounts
Summary Telegram legacy allowFrom migration fans default-account trust into all named accounts Current Maintainer Triage - Status: open - Normalized severity: low - Assessment: Shipped v2026.3.28 Telegram migration fans legacy default-account allowFrom trust into named accounts, which is an...
GHSA-M6FX-M8HC-572M OpenClaw: Telegram audio preflight transcription enables resource consumption by unauthorized senders
Summary Telegram audio preflight transcription enables resource consumption by unauthorized senders Current Maintainer Triage - Status: narrow - Normalized severity: medium - Assessment: v2026.3.28 still lets unauthorized Telegram group senders trigger audio preflight before allowlist enforcement...
OpenClaw: Telegram audio preflight transcription enables resource consumption by unauthorized senders
Summary Telegram audio preflight transcription enables resource consumption by unauthorized senders Current Maintainer Triage - Status: narrow - Normalized severity: medium - Assessment: v2026.3.28 still lets unauthorized Telegram group senders trigger audio preflight before allowlist enforcement...
GHSA-WJ4R-HR4H-G98V
creationtimestamp| type| source ---|---|--- 2026-04-02 22:23:23+00:00| seen| Telegram/3gsJ80xyJgAiTFZiH4SjKRBEhW5SGPUuKPeFIX1uRKbZ4...
GHSA-6C3W-7XG4-4CF7
creationtimestamp| type| source ---|---|--- 2026-04-02 22:23:23+00:00| seen| Telegram/3gsJ80xyJgAiTFZiH4SjKRBEhW5SGPUuKPeFIX1uRKbZ4...
GHSA-H22J-FRRF-5VXQ
creationtimestamp| type| source ---|---|--- 2026-04-02 22:23:12+00:00| published-proof-of-concept| Telegram/qg3HF91OLRRzWQbI7Pfv-fl8vLkHd7iL-mBbLD40slyOww...
GHSA-5W5C-766X-265G
creationtimestamp| type| source ---|---|--- 2026-04-02 22:23:12+00:00| published-proof-of-concept| Telegram/qg3HF91OLRRzWQbI7Pfv-fl8vLkHd7iL-mBbLD40slyOww...
GHSA-7FG7-WX5Q-6M3V
creationtimestamp| type| source ---|---|--- 2026-04-02 22:23:12+00:00| published-proof-of-concept| Telegram/qg3HF91OLRRzWQbI7Pfv-fl8vLkHd7iL-mBbLD40slyOww...
GHSA-4356-876G-RFMH
creationtimestamp| type| source ---|---|--- 2026-04-02 22:23:12+00:00| published-proof-of-concept| Telegram/qg3HF91OLRRzWQbI7Pfv-fl8vLkHd7iL-mBbLD40slyOww...
GHSA-9M89-5JW7-Q5CR
creationtimestamp| type| source ---|---|--- 2026-04-02 22:22:55+00:00| seen| Telegram/EKU3EO0GNZYVnupMzIC7jT0Kx1d9wsZeA8MakquUKITh-r8...
GHSA-47PM-883H-885R
creationtimestamp| type| source ---|---|--- 2026-04-02 22:22:55+00:00| seen| Telegram/EKU3EO0GNZYVnupMzIC7jT0Kx1d9wsZeA8MakquUKITh-r8...
GHSA-6WC5-RHVJ-CX7F
creationtimestamp| type| source ---|---|--- 2026-04-02 22:22:55+00:00| seen| Telegram/EKU3EO0GNZYVnupMzIC7jT0Kx1d9wsZeA8MakquUKITh-r8...