Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/03/04 7:3 p.m.13 views

OpenClaw has incomplete IPv4 special-use SSRF blocking in web fetch guard

Summary isPrivateIpv4 in bundled SSRF guard code missed several IPv4 special-use/non-global ranges, so webfetch could allow targets that should be blocked by SSRF policy. Affected Packages / Versions - Package: openclaw npm - Latest published affected version: 2026.2.21-2 published 2026-02-21 -...

7.4CVSS6AI score0.00206EPSS
SaveExploits0References8Affected Software1
Rows per page
Query Builder