GHSA-782P-5FR5-7FJ8 OpenClaw Affected by Remote Code Execution via System Prompt Injection in Slack Channel Descriptions

Summary When the Slack integration is enabled, Slack channel metadata topic/description could be incorporated into the model's system prompt. Impact Prompt injection is a documented risk for LLM-driven systems. This issue increased the injection surface by allowing untrusted Slack channel metadat...

CVE-2025-32355

CVE-2025-32355 affects Rocket TRUfusion Enterprise up to version 7.10.4.0, where the built-in reverse proxy can be misconfigured to accept absolute URLs in the HTTP request line. This enables server-side requests to load arbitrary resources via the proxy, constituting a server-side request forger...

CVE-2026-2003 affecting package postgresql for versions less than 14.21-1

CVE-2026-2003 affecting package postgresql for versions less than 14.21-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-69421 affecting package hvloader for versions less than 1.0.1-17

CVE-2025-69421 affecting package hvloader for versions less than 1.0.1-17. A patched version of the package is available...

CVE-2026-24747 affecting package pytorch for versions less than 2.0.0-13

CVE-2026-24747 affecting package pytorch for versions less than 2.0.0-13. A patched version of the package is available...

AZL-77423 CVE-2026-2004 affecting package postgresql for versions less than 16.12-1

Missing validation of type of input in PostgreSQL intarray extension selectivity estimator function allows an object creator to execute arbitrary code as the operating system user running the database. Versions before PostgreSQL 18.2, 17.8, 16.12, 15.16, and 14.21 are affected...

CVE-2024-8612 affecting package qemu for versions less than 9.1.0-1

CVE-2024-8612 affecting package qemu for versions less than 9.1.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-14459 affecting package kubevirt for versions less than 1.7.0-1

CVE-2025-14459 affecting package kubevirt for versions less than 1.7.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-46784 affecting package lasso for versions less than 2.9.0-1

CVE-2025-46784 affecting package lasso for versions less than 2.9.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-46705 affecting package lasso for versions less than 2.9.0-1

CVE-2025-46705 affecting package lasso for versions less than 2.9.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-47151 affecting package lasso for versions less than 2.9.0-1

CVE-2025-47151 affecting package lasso for versions less than 2.9.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-21948 affecting package mysql for versions less than 8.0.45-1

CVE-2026-21948 affecting package mysql for versions less than 8.0.45-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-68783 affecting package kernel for versions less than 6.6.121.1-1

CVE-2025-68783 affecting package kernel for versions less than 6.6.121.1-1. A patched version of the package is available...

CVE-2025-71079 affecting package kernel for versions less than 6.6.121.1-1

CVE-2025-71079 affecting package kernel for versions less than 6.6.121.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-21941 affecting package mysql for versions less than 8.0.45-1

CVE-2026-21941 affecting package mysql for versions less than 8.0.45-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-68775 affecting package kernel for versions less than 6.6.121.1-1

CVE-2025-68775 affecting package kernel for versions less than 6.6.121.1-1. A patched version of the package is available...

CVE-2025-71088 affecting package kernel for versions less than 6.6.121.1-1

CVE-2025-71088 affecting package kernel for versions less than 6.6.121.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-68814 affecting package kernel for versions less than 6.6.121.1-1

CVE-2025-68814 affecting package kernel for versions less than 6.6.121.1-1. A patched version of the package is available...

CVE-2025-68756 affecting package kernel for versions less than 6.6.121.1-1

CVE-2025-68756 affecting package kernel for versions less than 6.6.121.1-1. A patched version of the package is available...

CVE-2026-22984 affecting package kernel for versions less than 6.6.121.1-1

CVE-2026-22984 affecting package kernel for versions less than 6.6.121.1-1. An upgraded version of the package is available that resolves this issue...