@openclaw/kitchen-sink (>=0.2.8, <=0.2.9), @shadowob/openclaw-shadowob (>=1.1.50, <=1.1.64) +1 more potentially affected by CVE-2026-62202 via openclaw (>=2026.6.1, <=2026.6.6)

openclaw NPM version =2026.6.1, =0.2.8, =1.1.50, =0.0.1-release20260506, =0.0.232-next Source cves: CVE-2026-62202 Source advisory: SNYK:JS-OPENCLAW-18021341...

@ynhcj/xiaoyi-channel (>=0.0.1-release20260506, <=0.0.232-next) potentially affected by CVE-2026-62191 via openclaw (2026.6.6)

openclaw NPM version 2026.6.6 is affected by a known vulnerability. The following packages have a transitive dependency on openclaw and may be impacted: - @ynhcj/xiaoyi-channel =0.0.1-release20260506, =0.0.232-next Source cves: CVE-2026-62191 Source advisory: SNYK:JS-OPENCLAW-17970561...