CVE-2026-20999

creationtimestamp| type| source ---|---|--- 2026-03-30 09:00:04+00:00| seen| https://t.me/GithubRedTeam/77928 2026-03-30 15:00:06+00:00| published-proof-of-concept| Telegram/pEvDlFgEJuiOJi0pdpDLW7XAzWWPVWvDgc6lfDEOZmEhu0...

CVE-2026-34598

creationtimestamp| type| source ---|---|--- 2026-03-29 19:27:45+00:00| published-proof-of-concept| https://github.com/YesWiki/yeswiki/security/advisories/GHSA-37fq-47qj-6j5j 2026-04-02 19:27:20+00:00| published-proof-of-concept| Telegram/zJs9VhJAI5JOvrL4hzeWnrOleMDgHArbbwhOuzjaL80cudA...

Malicious code in hiveos (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 632c5c53f72df87d7b0d9843df212e147e729699ffe5e7f6c20e3cd41fa13f64 Clones of legitimate libraries with malicious modifications intended to download malicious remote code. The remote script allows executing arbitrary files...

MAL-2026-2294 Malicious code in hiveos (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 632c5c53f72df87d7b0d9843df212e147e729699ffe5e7f6c20e3cd41fa13f64 Clones of legitimate libraries with malicious modifications intended to download malicious remote code. The remote script allows executing arbitrary files...

OpenClaw: Telegram DM-Scoped Inline Button Callbacks Bypass DM Pairing and Mutate Session State

Summary Telegram DM-Scoped Inline Button Callbacks Bypass DM Pairing and Mutate Session State Affected Packages / Versions - Package: openclaw - Affected versions: = 2026.3.24 - First patched version: 2026.3.25 - Latest published npm version at verification time: 2026.3.24 Details Telegram callba...

GHSA-J4C9-W69R-CW33 OpenClaw: Telegram DM-Scoped Inline Button Callbacks Bypass DM Pairing and Mutate Session State

Summary Telegram DM-Scoped Inline Button Callbacks Bypass DM Pairing and Mutate Session State Affected Packages / Versions - Package: openclaw - Affected versions: = 2026.3.24 - First patched version: 2026.3.25 - Latest published npm version at verification time: 2026.3.24 Details Telegram callba...

EUVD-2026-17020

OpenClaw before 2026.3.13 reads and buffers Telegram webhook request bodies before validating the x-telegram-bot-api-secret-token header, allowing unauthenticated attackers to exhaust server resources. Attackers can send POST requests to the webhook endpoint to force memory consumption, socket...

GHSA-C447-W54G-F55J Duplicate Advisory: OpenClaw Telegram webhook request bodies were read before secret validation, enabling unauthenticated resource exhaustion

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-jq3f-vjww-8rq7. This link is maintained to preserve external references. Original Description OpenClaw before 2026.3.13 reads and buffers Telegram webhook request bodies before validating the...

Duplicate Advisory: OpenClaw Telegram webhook request bodies were read before secret validation, enabling unauthenticated resource exhaustion

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-jq3f-vjww-8rq7. This link is maintained to preserve external references. Original Description OpenClaw before 2026.3.13 reads and buffers Telegram webhook request bodies before validating the...

GHSA-XF99-J42Q-5W5P

creationtimestamp| type| source ---|---|--- 2026-03-29 15:20:32+00:00| seen| Telegram/JZ1l27ygigxS-8YXSWLEZI05cz4uxozp1fQc7J9Y59z0mpU...

GHSA-VR7J-G7JV-H5MP

creationtimestamp| type| source ---|---|--- 2026-03-29 15:20:32+00:00| seen| Telegram/JZ1l27ygigxS-8YXSWLEZI05cz4uxozp1fQc7J9Y59z0mpU...

GHSA-63F5-HHC7-CX6P

creationtimestamp| type| source ---|---|--- 2026-03-29 15:20:32+00:00| seen| Telegram/JZ1l27ygigxS-8YXSWLEZI05cz4uxozp1fQc7J9Y59z0mpU...

GHSA-JQ3F-VJWW-8RQ7

creationtimestamp| type| source ---|---|--- 2026-03-29 15:20:32+00:00| seen| Telegram/JZ1l27ygigxS-8YXSWLEZI05cz4uxozp1fQc7J9Y59z0mpU...

GHSA-F5MF-3R52-R83W

creationtimestamp| type| source ---|---|--- 2026-03-29 15:20:09+00:00| seen| Telegram/bOji7uFGKpjQ-Vv3CFZvWqxNHLg4F03MY6E5pxai3iB8W0...

GHSA-QC36-X95H-7J53

creationtimestamp| type| source ---|---|--- 2026-03-29 15:20:09+00:00| seen| Telegram/bOji7uFGKpjQ-Vv3CFZvWqxNHLg4F03MY6E5pxai3iB8W0...

GHSA-4JPW-HJ22-2XMC

creationtimestamp| type| source ---|---|--- 2026-03-29 15:19:56+00:00| published-proof-of-concept| Telegram/cXzVIGK7PQfwtmMwRkRYvJTJsFs-s6Ys2jSidGnYSoPd-U...

GHSA-4W7M-58CG-CMFF

creationtimestamp| type| source ---|---|--- 2026-03-29 15:19:56+00:00| published-proof-of-concept| Telegram/cXzVIGK7PQfwtmMwRkRYvJTJsFs-s6Ys2jSidGnYSoPd-U...

CVE-2026-33533

creationtimestamp| type| source ---|---|--- 2026-03-29 15:05:01+00:00| published-proof-of-concept| https://github.com/nicolargo/glances/security/advisories/GHSA-7p93-6934-f4q7 2026-04-02 17:37:18+00:00| seen| Telegram/asfs2UkHDA2dEAWxK7wNvn0OefGesF-RFz1ocNui3XpVnY...

CVE-2026-32980

OpenClaw before 2026.3.13 reads and buffers Telegram webhook request bodies before validating the x-telegram-bot-api-secret-token header, allowing unauthenticated attackers to exhaust server resources. Attackers can send POST requests to the webhook endpoint to force memory consumption, socket...

CVE-2026-32980

OpenClaw before 2026.3.13 reads and buffers Telegram webhook request bodies before validating the x-telegram-bot-api-secret-token header, allowing unauthenticated attackers to exhaust server resources. Attackers can send POST requests to the webhook endpoint to force memory consumption, socket...