Package Instance
Lookup for vulnerable packages by Package URL.
GET /api/packages/40140?format=api
{ "url": "http://public2.vulnerablecode.io/api/packages/40140?format=api", "purl": "pkg:npm/openclaw@2026.1.21", "type": "npm", "namespace": "", "name": "openclaw", "version": "2026.1.21", "qualifiers": {}, "subpath": "", "is_vulnerable": true, "next_non_vulnerable_version": "2026.3.25", "latest_non_vulnerable_version": "2026.4.23", "affected_by_vulnerabilities": [ { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/360134?format=api", "vulnerability_id": "VCID-bgb7-9jph-n3cj", "summary": "Duplicate Advisory: OpenClaw has Windows Lobster shell fallback command injection in constrained fallback path\n## Duplicate Advisory\n\nThis advisory has been withdrawn because it is a duplicate of GHSA-fg3m-vhrr-8gj6. This link is maintained to preserve external references.\n\n## Original Description\nOpenClaw versions 2026.1.21 prior to 2026.2.19 contain a command injection vulnerability in the Lobster extension's Windows shell fallback mechanism that allows attackers to inject arbitrary commands through tool-provided arguments. When spawn failures trigger shell fallback with shell: true, attackers can exploit cmd.exe command interpretation to execute malicious commands by controlling workflow arguments.", "references": [ { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31995", "reference_id": "CVE-2026-31995", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:L" }, { "value": "5.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31995" }, { "reference_url": "https://github.com/advisories/GHSA-8px5-2gfr-7ph6", "reference_id": "GHSA-8px5-2gfr-7ph6", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-8px5-2gfr-7ph6" }, { "reference_url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-fg3m-vhrr-8gj6", "reference_id": "GHSA-fg3m-vhrr-8gj6", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:L" }, { "value": "5.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-fg3m-vhrr-8gj6" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/949836?format=api", "purl": "pkg:npm/openclaw@2026.2.19-1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-123y-4gt3-5yff" }, { "vulnerability": "VCID-12a9-am5h-9fch" }, { "vulnerability": "VCID-13uy-bfur-93c9" }, { "vulnerability": "VCID-15w3-g7at-47h9" }, { "vulnerability": "VCID-1bt7-g5ww-2fb1" }, { "vulnerability": "VCID-1cbb-8u8n-dqa8" }, { "vulnerability": "VCID-1f2r-y41u-y7b4" }, { "vulnerability": "VCID-1gsf-j6g3-4fd7" }, { "vulnerability": "VCID-1ht7-4wun-gba4" }, { "vulnerability": "VCID-1j9j-8qcc-tyhy" }, { "vulnerability": "VCID-1kxp-xqnc-e3a7" }, { "vulnerability": "VCID-1qwb-a969-kye3" }, { "vulnerability": "VCID-1sxg-r1bm-mygk" }, { "vulnerability": "VCID-1vjp-h67t-zqbx" }, { "vulnerability": "VCID-1wqp-rrgy-4ffe" }, { "vulnerability": "VCID-1xsa-kxhe-6ugq" }, { "vulnerability": "VCID-213t-kf4c-qfct" }, { "vulnerability": "VCID-24x5-nkt2-wbg7" }, { "vulnerability": "VCID-27ud-w29j-cbeq" }, { "vulnerability": "VCID-29xp-41b2-cycb" }, { "vulnerability": "VCID-2amg-4khy-1ufr" }, { "vulnerability": "VCID-2c8q-g4uw-mufb" }, { "vulnerability": "VCID-2d5p-gd51-3bfc" }, { "vulnerability": "VCID-2d6p-8jxd-1yc4" }, { "vulnerability": "VCID-2h93-dwfp-4yfe" }, { "vulnerability": "VCID-2keu-vgjt-t7ba" }, { "vulnerability": "VCID-2mq8-xddp-y7ef" }, { "vulnerability": "VCID-2t7c-q448-a7bp" }, { "vulnerability": "VCID-2tsv-9m6k-1qdn" }, { "vulnerability": "VCID-2vz1-7wq1-qbbk" }, { "vulnerability": "VCID-318g-779j-zubv" }, { "vulnerability": "VCID-3c7e-6d4p-cqdt" }, { "vulnerability": "VCID-3f2g-c9me-nbdm" }, { "vulnerability": "VCID-3f8g-rfq5-fbeb" }, { "vulnerability": "VCID-3fg7-n18p-cqek" }, { "vulnerability": "VCID-3j36-vx1n-7ua8" }, { "vulnerability": "VCID-3qf3-mq53-fbgp" }, { "vulnerability": "VCID-3qmy-shux-qbaf" }, { "vulnerability": "VCID-3swm-pxgf-sqbx" }, { "vulnerability": "VCID-3z4d-sm3h-2bg4" }, { "vulnerability": "VCID-3zp7-juc8-cbf4" }, { "vulnerability": "VCID-416m-tsuc-b3fg" }, { "vulnerability": "VCID-45as-yk5j-dug2" }, { "vulnerability": "VCID-47ty-n3m4-nbbe" }, { "vulnerability": "VCID-484n-y2yq-73fw" }, { "vulnerability": "VCID-4ef4-xvcn-nbbq" }, { "vulnerability": "VCID-4fv2-atra-6ue3" }, { "vulnerability": "VCID-4jvj-amc8-2qb7" }, { "vulnerability": "VCID-4kcu-akxv-hker" }, { "vulnerability": "VCID-4n9g-ymdq-6fhd" }, { "vulnerability": "VCID-4qqv-57ws-4yb3" }, { "vulnerability": "VCID-4rku-5hg1-kucn" }, { "vulnerability": "VCID-4srt-x1xb-xqa8" }, { "vulnerability": "VCID-4umw-rnj5-efad" }, { "vulnerability": "VCID-4x1j-ccq5-d7cu" }, { "vulnerability": "VCID-4yrw-qqvt-jkhn" }, { "vulnerability": "VCID-54js-czwp-jkce" }, { "vulnerability": "VCID-55vp-7m3m-pfem" }, { "vulnerability": "VCID-563k-49s5-5fbp" }, { "vulnerability": "VCID-59a9-8rag-mfg5" }, { "vulnerability": "VCID-59an-tnp2-qfgg" }, { "vulnerability": "VCID-5c35-mfrw-r3fg" }, { "vulnerability": "VCID-5czq-jh7n-a3d8" }, { "vulnerability": "VCID-5eqd-gfxe-t7g7" }, { "vulnerability": "VCID-5f5k-cvpn-9ycm" }, { "vulnerability": "VCID-5hvu-e2e8-y7h6" }, { "vulnerability": "VCID-5j3s-mfzd-2uex" }, { "vulnerability": "VCID-5jgs-gk2n-8fdk" }, { "vulnerability": "VCID-5k9d-n6kg-g3bn" }, { "vulnerability": "VCID-5msy-va7d-jkhz" }, { "vulnerability": "VCID-5qma-pezj-mucc" }, { "vulnerability": "VCID-5r19-s5sm-x7bj" }, { "vulnerability": "VCID-5szz-xqng-fffv" }, { "vulnerability": "VCID-5uvn-998w-hfds" }, { "vulnerability": "VCID-5zh4-jn4s-akc9" }, { "vulnerability": "VCID-64pj-77vs-8kbf" }, { "vulnerability": "VCID-65nh-ys6n-77ag" }, { "vulnerability": "VCID-65wu-sbhd-vfg3" }, { "vulnerability": "VCID-6atn-d2zy-1qcm" }, { "vulnerability": "VCID-6bzc-dk3a-c7gk" }, { "vulnerability": "VCID-6ccy-jc9d-6qcm" }, { "vulnerability": "VCID-6ce4-zpfh-pybu" }, { "vulnerability": "VCID-6ctp-85cy-k3dz" }, { "vulnerability": "VCID-6cym-v42t-quh6" }, { "vulnerability": "VCID-6fjf-yjn7-qkbh" }, { "vulnerability": "VCID-6g13-hcrk-xucm" }, { "vulnerability": "VCID-6hav-n44a-dkeu" }, { "vulnerability": "VCID-6hhg-fpqw-kye9" }, { "vulnerability": "VCID-6mxs-hks9-guhr" }, { "vulnerability": "VCID-6mys-s3w1-cuc5" }, { "vulnerability": "VCID-6pq6-st7v-kbfy" }, { "vulnerability": "VCID-6vqt-8y4n-63h8" }, { "vulnerability": "VCID-6w88-6bts-sudv" }, { "vulnerability": "VCID-71uy-yz3c-n3et" }, { "vulnerability": "VCID-722e-beau-8kdc" }, { "vulnerability": "VCID-76at-qeek-4ugp" }, { "vulnerability": "VCID-76ju-xywr-7kfp" }, { "vulnerability": "VCID-7a1r-hefj-pfg4" }, { "vulnerability": "VCID-7bpx-6g2s-8kfd" }, { "vulnerability": "VCID-7d3q-jnqg-fuhd" }, { "vulnerability": "VCID-7dbw-4jba-83a4" }, { "vulnerability": "VCID-7gjj-xzp6-mqcx" }, { "vulnerability": "VCID-7hs9-xdrx-gqbh" }, { "vulnerability": "VCID-7j27-ndq2-mfht" }, { "vulnerability": "VCID-7kyj-gddz-gkfb" }, { "vulnerability": "VCID-7r7v-pvsj-uyaw" }, { "vulnerability": "VCID-7rcc-8g5p-3ydv" }, { "vulnerability": "VCID-7v88-gh66-ybgd" }, { "vulnerability": "VCID-812y-rb9q-m7eu" }, { "vulnerability": "VCID-82aq-wxf5-aka8" }, { "vulnerability": "VCID-84ms-aakm-x3dc" }, { "vulnerability": "VCID-86wa-z59e-xqgu" }, { "vulnerability": "VCID-8d4y-8k53-tqe8" }, { "vulnerability": "VCID-8ezv-nxwq-q3b1" }, { "vulnerability": "VCID-8h62-5c5b-cbdt" }, { "vulnerability": "VCID-8h7u-pr1w-z7df" }, { "vulnerability": "VCID-8k93-nveu-fbem" }, { "vulnerability": "VCID-8n16-rgcn-2bey" }, { "vulnerability": "VCID-8qct-rjx7-5ufs" }, { "vulnerability": "VCID-8qs2-h6se-9bav" }, { "vulnerability": "VCID-8sps-h6k2-43c9" }, { "vulnerability": "VCID-8x1d-qnqk-7qcz" }, { "vulnerability": "VCID-913y-6es4-jqer" }, { "vulnerability": "VCID-925q-556p-q3f6" }, { "vulnerability": "VCID-95y2-eute-yyfm" }, { "vulnerability": "VCID-9ate-5gcz-budv" }, { "vulnerability": "VCID-9csu-c6t3-3kak" }, { "vulnerability": "VCID-9deg-e4f1-ekex" }, { "vulnerability": "VCID-9fsp-y8ve-yqae" }, { "vulnerability": "VCID-9jhp-q7y2-8qdu" }, { "vulnerability": "VCID-9pv2-ufhu-w7g1" }, { "vulnerability": "VCID-9t16-uew2-ryhb" }, { "vulnerability": "VCID-9te9-qm18-ybcg" }, { "vulnerability": "VCID-9u9n-s6sc-2bhw" }, { "vulnerability": "VCID-9vbr-88pv-hudj" }, { "vulnerability": "VCID-9wbp-zj23-fyg4" }, { "vulnerability": "VCID-9xv8-jtc8-ekcr" }, { "vulnerability": "VCID-9z5y-grx7-fbap" }, { "vulnerability": "VCID-9zkk-mp8b-kbbg" }, { "vulnerability": "VCID-a4pw-9uzw-47ge" }, { "vulnerability": "VCID-a7hc-rue8-13eb" }, { "vulnerability": "VCID-a9q6-xpjm-6yfd" }, { "vulnerability": "VCID-adnz-kugc-63e6" }, { "vulnerability": "VCID-ae96-b8bt-43bv" }, { "vulnerability": "VCID-aegc-6ab1-k7hk" }, { "vulnerability": "VCID-afjz-us2v-k7ak" }, { "vulnerability": "VCID-agtk-z6cf-1bh7" }, { "vulnerability": "VCID-atc5-y6k6-zbg6" }, { "vulnerability": "VCID-b194-drmd-hkbp" }, { "vulnerability": "VCID-b3av-6zna-sugm" }, { "vulnerability": "VCID-b3nv-4pe7-fyhj" }, { "vulnerability": "VCID-bbsf-dk9q-nqh3" }, { "vulnerability": "VCID-bddn-w4cm-9udq" }, { "vulnerability": "VCID-bdx2-c7m3-xbfv" }, { "vulnerability": "VCID-bdzw-kmgp-yuaw" }, { "vulnerability": "VCID-bfj1-xxkp-aubu" }, { "vulnerability": "VCID-bj4f-1qy4-33g7" }, { "vulnerability": "VCID-bn3j-q22a-aybg" }, { "vulnerability": "VCID-bnzw-duu7-7fgu" }, { "vulnerability": "VCID-bqwy-vw6g-uudj" }, { "vulnerability": "VCID-br1n-wbkc-ybcj" }, { "vulnerability": "VCID-brzy-7832-5bhh" }, { "vulnerability": "VCID-bt5u-3vwp-rqcw" }, { "vulnerability": "VCID-bvyn-2c5r-4bce" }, { "vulnerability": "VCID-c198-v1zn-pbck" }, { "vulnerability": "VCID-c3fa-2u7p-pkgn" }, { "vulnerability": "VCID-c3hg-hct8-eqbv" }, { "vulnerability": "VCID-c6nr-dhdu-93fk" }, { "vulnerability": "VCID-c723-znew-ebhm" }, { "vulnerability": "VCID-c8dt-7z8a-qufe" }, { "vulnerability": "VCID-c8mh-j256-j3aa" }, { "vulnerability": "VCID-cbdg-vzrj-puc2" }, { "vulnerability": "VCID-cf4u-fs5p-3ue3" }, { "vulnerability": "VCID-cfj6-nuq4-wudw" }, { "vulnerability": "VCID-cj2h-dvh1-1bhx" }, { "vulnerability": "VCID-ckjx-441a-zqfx" }, { "vulnerability": "VCID-cqm7-wncz-z3ed" }, { "vulnerability": "VCID-cqr5-czj7-wugj" }, { "vulnerability": "VCID-cqrj-mmkg-fkb1" }, { "vulnerability": "VCID-crh9-tw4p-2bgr" }, { "vulnerability": "VCID-cu3u-xqct-vqg6" }, { "vulnerability": "VCID-cvzz-6xem-hybt" }, { "vulnerability": "VCID-d34s-z46v-gygk" }, { "vulnerability": "VCID-d5d6-s6qw-1bbf" }, { "vulnerability": "VCID-d5tv-wk9w-8fcu" }, { "vulnerability": "VCID-d8dy-y1mu-bqgc" }, { "vulnerability": "VCID-dc4t-ydnk-wygg" }, { "vulnerability": "VCID-ddem-sm3q-h3ck" }, { "vulnerability": "VCID-deuq-mfzr-d7c2" }, { "vulnerability": "VCID-dh5x-3xrq-hbfc" }, { "vulnerability": "VCID-djr4-azeh-mfap" }, { "vulnerability": "VCID-dnts-s9yw-5ydv" }, { "vulnerability": "VCID-dnym-w1cd-9fdj" }, { "vulnerability": "VCID-dpvy-8e93-13hb" }, { "vulnerability": "VCID-dtrh-kmkq-r7hd" }, { "vulnerability": "VCID-dtva-truu-4qac" }, { "vulnerability": "VCID-duqg-y513-2bd2" }, { "vulnerability": "VCID-dvpa-1jjf-dqap" }, { "vulnerability": "VCID-dvr7-ug54-1fcj" }, { "vulnerability": "VCID-dxpt-cg6z-17am" }, { "vulnerability": "VCID-e1s7-q6qr-4fbc" }, { "vulnerability": "VCID-e327-pu9e-x7gh" }, { "vulnerability": "VCID-e351-abpr-7fhx" }, { "vulnerability": "VCID-e6cf-mh6h-pqgn" }, { "vulnerability": "VCID-e6q6-e2my-gfce" }, { "vulnerability": "VCID-e84v-kdtb-5ycs" }, { "vulnerability": "VCID-e8sz-63dk-tfbs" }, { "vulnerability": "VCID-eaeg-e381-nyh5" }, { "vulnerability": "VCID-eay3-43e2-a7g9" }, { "vulnerability": "VCID-ed19-ejju-v3c7" }, { "vulnerability": "VCID-ed61-sus3-3yh9" }, { "vulnerability": "VCID-eefn-gpc1-mfdx" }, { "vulnerability": "VCID-eju9-rz5x-1bbk" }, { "vulnerability": "VCID-ekbd-qgdz-wqab" }, { "vulnerability": "VCID-emy9-ceb6-vfba" }, { "vulnerability": "VCID-epaf-29e7-kue8" }, { "vulnerability": "VCID-eq4c-dfbr-h7hr" }, { "vulnerability": "VCID-es6n-25j9-jqfe" }, { "vulnerability": "VCID-esfn-atcn-aygd" }, { "vulnerability": "VCID-esfq-5qft-rqf2" }, { "vulnerability": "VCID-esve-n4ww-rudc" }, { "vulnerability": "VCID-eu95-x34h-5bhb" }, { "vulnerability": "VCID-f19h-hsfh-n3a7" }, { "vulnerability": "VCID-f22e-sy58-g7fb" }, { "vulnerability": "VCID-f273-e6zd-cqbx" }, { "vulnerability": "VCID-f456-fjce-9bcz" }, { "vulnerability": "VCID-f5q3-7bm2-1kgw" }, { "vulnerability": "VCID-f7e2-bkh9-qbed" }, { "vulnerability": "VCID-f925-x5qa-buav" }, { "vulnerability": "VCID-f95y-gnx3-wydp" }, { "vulnerability": "VCID-f97e-xtcp-eqfe" }, { "vulnerability": "VCID-fgkb-fmuq-wffh" }, { "vulnerability": "VCID-fgvc-92pj-h3c1" }, { "vulnerability": "VCID-fm8t-8xfh-pqbt" }, { "vulnerability": "VCID-fs69-xwjn-5kez" }, { "vulnerability": "VCID-fwng-2afx-27bp" }, { "vulnerability": "VCID-fzag-upa9-n7cr" }, { "vulnerability": "VCID-g2ew-esnk-6ufd" }, { "vulnerability": "VCID-g2hf-mzjs-2fbn" }, { "vulnerability": "VCID-g7fp-6gzk-83gk" }, { "vulnerability": "VCID-g8k6-3qev-v7ga" }, { "vulnerability": "VCID-gd62-paxx-abgy" }, { "vulnerability": "VCID-ggpx-kfke-xfhr" }, { "vulnerability": "VCID-gh64-hwfz-p3ep" }, { "vulnerability": "VCID-gnq2-tc6q-h7hv" }, { "vulnerability": "VCID-gp5z-f4yu-wqhw" }, { "vulnerability": "VCID-gtx5-qd3p-cyd2" }, { "vulnerability": "VCID-gyeu-sff6-vfgb" }, { "vulnerability": "VCID-h35e-at78-gban" }, { "vulnerability": "VCID-h5h5-c9az-4be3" }, { "vulnerability": "VCID-h6wv-azua-wkgw" }, { "vulnerability": "VCID-h77b-c2kq-8kej" }, { "vulnerability": "VCID-h78a-py8h-ekgj" }, { "vulnerability": "VCID-hbkd-8rx2-4qb8" }, { "vulnerability": "VCID-hh2g-pzbh-13ax" }, { "vulnerability": "VCID-hha6-2yr5-x3dd" }, { "vulnerability": "VCID-hpwn-wgb8-xbh4" }, { "vulnerability": "VCID-hrnb-5t6m-jkaq" }, { "vulnerability": "VCID-hvg4-uvx3-mbg2" }, { "vulnerability": "VCID-hvv4-s4g7-vfea" }, { "vulnerability": "VCID-hxz1-6ma6-7bfj" }, { "vulnerability": "VCID-hy1q-5cfa-q7es" }, { "vulnerability": "VCID-j13w-x4ky-8yhd" }, { "vulnerability": "VCID-j5zq-h26v-6ub1" }, { "vulnerability": "VCID-j7bv-npgz-n7e7" }, { "vulnerability": "VCID-j7uv-qgjz-ubdq" }, { "vulnerability": "VCID-j915-992q-8fba" }, { "vulnerability": "VCID-j9kk-jqgm-kqbk" }, { "vulnerability": "VCID-jarm-du2f-1uef" }, { "vulnerability": "VCID-jdbz-6b2q-xyav" }, { "vulnerability": "VCID-jf29-pknk-5kcm" }, { "vulnerability": "VCID-jfuc-1dfh-vyh6" }, { "vulnerability": "VCID-jj5g-2uaq-tua3" }, { "vulnerability": "VCID-jnbs-cnfs-nkb5" }, { "vulnerability": "VCID-jux3-h9k5-zbc4" }, { "vulnerability": "VCID-juz5-e48p-hufx" }, { "vulnerability": "VCID-jwnv-j7hq-sbh9" }, { "vulnerability": "VCID-jzrz-3e6m-c7ez" }, { "vulnerability": "VCID-jzvr-jz7v-q3h1" }, { "vulnerability": "VCID-k19r-em9r-bybp" }, { "vulnerability": "VCID-k1fs-5s5j-xyh6" }, { "vulnerability": "VCID-k64p-h928-dfcs" }, { "vulnerability": "VCID-kact-h3hk-d7eg" }, { "vulnerability": "VCID-kdn3-sa62-4bef" }, { "vulnerability": "VCID-kfmd-usy4-afbu" }, { "vulnerability": "VCID-khan-g53z-kycn" }, { "vulnerability": "VCID-kk6q-qysv-eqe6" }, { "vulnerability": "VCID-kkqe-kjun-mufe" }, { "vulnerability": "VCID-kkw6-d2rs-9uh3" }, { "vulnerability": "VCID-kmue-xe85-hbgr" }, { "vulnerability": "VCID-kpbm-y7e6-t3gg" }, { "vulnerability": "VCID-kprt-1prq-n7bt" }, { "vulnerability": "VCID-kr71-ur8n-vqe1" }, { "vulnerability": "VCID-kt4v-cekr-fka8" }, { "vulnerability": "VCID-ktfy-rem3-k3d6" }, { "vulnerability": "VCID-kuc7-qpf2-wqa2" }, { "vulnerability": "VCID-kxyq-t74z-p3gf" }, { "vulnerability": "VCID-kzju-dt4v-syff" }, { "vulnerability": "VCID-kzy6-14nx-p3a6" }, { "vulnerability": "VCID-m3h2-6en6-2ye4" }, { "vulnerability": "VCID-m4qc-8d4v-dbe2" }, { "vulnerability": "VCID-m5mp-zry4-wfew" }, { "vulnerability": "VCID-m8ba-t6kp-3kcx" }, { "vulnerability": "VCID-magx-dxd3-qug2" }, { "vulnerability": "VCID-mdss-pw9y-7kh6" }, { "vulnerability": "VCID-mgy3-hqf2-q3hj" }, { "vulnerability": "VCID-msr2-gsjh-1bat" }, { "vulnerability": "VCID-mwj4-uf8p-e3bm" }, { "vulnerability": "VCID-mwyx-q85j-93dk" }, { "vulnerability": "VCID-n2xf-a53e-hkdn" }, { "vulnerability": "VCID-n3c5-p4ah-e7e9" }, { "vulnerability": "VCID-n77t-a476-8ye2" }, { "vulnerability": "VCID-n7cb-vz6z-cker" }, { "vulnerability": "VCID-n7kf-616a-67bk" }, { "vulnerability": "VCID-n8n3-2zmf-guhs" }, { "vulnerability": "VCID-n9kw-kgmv-nfhx" }, { "vulnerability": "VCID-na8n-2vex-zfdb" }, { "vulnerability": "VCID-nbmj-sgd8-j3dx" }, { "vulnerability": "VCID-ndwd-xjzr-3yd7" }, { "vulnerability": "VCID-ne92-59t9-q7c7" }, { "vulnerability": "VCID-nfvd-f7cc-tkhm" }, { "vulnerability": "VCID-njf8-w51n-qkgp" }, { "vulnerability": "VCID-nk7m-krnp-x3ej" }, { "vulnerability": "VCID-nkkj-ue4v-3ueh" }, { "vulnerability": "VCID-np53-nrkf-uyhe" }, { "vulnerability": "VCID-nsad-xxwh-cya4" }, { "vulnerability": "VCID-p53z-23c4-sych" }, { "vulnerability": "VCID-p9qc-pdbh-8qe8" }, { "vulnerability": "VCID-pbqc-njj8-1ucb" }, { "vulnerability": "VCID-pczy-1x3r-zfhg" }, { "vulnerability": "VCID-pdcf-d2ts-bfhs" }, { "vulnerability": "VCID-pe1f-8yv2-a7gn" }, { "vulnerability": "VCID-pe8x-6k73-eyd4" }, { "vulnerability": "VCID-pecx-xt79-1kht" }, { "vulnerability": "VCID-pjra-aaxs-ybek" }, { "vulnerability": "VCID-pksn-rpts-t7f8" }, { "vulnerability": "VCID-pm3t-c8dr-zkhy" }, { "vulnerability": "VCID-pnky-1fgw-mkdb" }, { "vulnerability": "VCID-psme-ems8-17e8" }, { "vulnerability": "VCID-pu7g-crjz-27c6" }, { "vulnerability": "VCID-pudw-8fpm-abak" }, { "vulnerability": "VCID-pxsn-dddj-a3hp" }, { "vulnerability": "VCID-pyut-62r7-6fgp" }, { "vulnerability": "VCID-pzqx-hyg6-cqhs" }, { "vulnerability": "VCID-q18t-kkbk-j3er" }, { "vulnerability": "VCID-q6h5-e93e-j3d7" }, { "vulnerability": "VCID-qcrw-m7k3-ubgm" }, { "vulnerability": "VCID-qhdq-m4mz-hyc1" }, { "vulnerability": "VCID-qjc6-9jy9-3qds" }, { "vulnerability": "VCID-qkbb-tk64-judu" }, { "vulnerability": "VCID-qmnc-zfxh-87g4" }, { "vulnerability": "VCID-qpq9-cabj-a7hj" }, { "vulnerability": "VCID-qqsk-1mk9-pygw" }, { "vulnerability": "VCID-qqz4-uy33-qya2" }, { "vulnerability": "VCID-qt48-xw6x-nudj" }, { "vulnerability": "VCID-qt8t-f9xc-qbgp" }, { "vulnerability": "VCID-qu81-grr8-x7af" }, { "vulnerability": "VCID-qujt-gddx-ckbm" }, { "vulnerability": "VCID-qwws-3gm7-ubfu" }, { "vulnerability": "VCID-qx6n-dk9c-8yd3" }, { "vulnerability": "VCID-qysu-d14g-j7hh" }, { "vulnerability": "VCID-r628-6er6-4qh5" }, { "vulnerability": "VCID-r75w-jwbm-dyew" }, { "vulnerability": "VCID-r9at-m759-wua3" }, { "vulnerability": "VCID-r9kn-e4wh-syh3" }, { "vulnerability": "VCID-rc3c-ycw2-nbcu" }, { "vulnerability": "VCID-rffw-fgxm-1ue9" }, { "vulnerability": "VCID-rm55-3hs1-23b4" }, { "vulnerability": "VCID-rnd8-vrah-d7fs" }, { "vulnerability": "VCID-rr2j-c7md-57gj" }, { "vulnerability": "VCID-rty8-9wrg-mycy" }, { "vulnerability": "VCID-rwq3-29gy-hfcx" }, { "vulnerability": "VCID-s45u-hr8t-gffq" }, { "vulnerability": "VCID-s639-xhxx-v7fe" }, { "vulnerability": "VCID-sb3c-wxqd-akg3" }, { "vulnerability": "VCID-sbxm-vwhw-9fhd" }, { "vulnerability": "VCID-sfht-6w2y-yfc4" }, { "vulnerability": "VCID-skbd-d6ks-uqe4" }, { "vulnerability": "VCID-smdw-1pdp-e3er" }, { "vulnerability": "VCID-sqr6-smfg-uqdy" }, { "vulnerability": "VCID-sqxg-9akn-j7az" }, { "vulnerability": "VCID-svyq-6gm7-efez" }, { "vulnerability": "VCID-t14t-27xx-83g3" }, { "vulnerability": "VCID-t2b3-n8xb-k3fn" }, { "vulnerability": "VCID-t2hz-4acu-9bcy" }, { "vulnerability": "VCID-t7nn-6cy7-2yak" }, { "vulnerability": "VCID-t8uj-crn4-4qej" }, { "vulnerability": "VCID-t9ay-fhuq-q3dk" }, { "vulnerability": "VCID-tegh-qc36-ufha" }, { "vulnerability": "VCID-tfmw-ee3j-xuax" }, { "vulnerability": "VCID-tg1c-vs9g-8ya8" }, { "vulnerability": "VCID-tgnw-vne2-2kc1" }, { "vulnerability": "VCID-tm7a-1rzn-5yak" }, { "vulnerability": "VCID-tm94-jwz9-kkd6" }, { "vulnerability": "VCID-ts15-y9qj-13e9" }, { "vulnerability": "VCID-ttg2-j7x3-m7de" }, { "vulnerability": "VCID-tttc-8v5c-bqgk" }, { "vulnerability": "VCID-tyz3-w2hm-gqg7" }, { "vulnerability": "VCID-u9gs-nc3d-bubh" }, { "vulnerability": "VCID-ua3s-nu49-r3c3" }, { "vulnerability": "VCID-uass-9jcc-x3f5" }, { "vulnerability": "VCID-ub5p-bp37-hff5" }, { "vulnerability": "VCID-umc5-sf9t-p7h6" }, { "vulnerability": "VCID-unkk-dpkx-mkhk" }, { "vulnerability": "VCID-utnp-5swq-4qan" }, { "vulnerability": "VCID-uxkz-gf1t-kua1" }, { "vulnerability": "VCID-uztv-hr8t-dyeu" }, { "vulnerability": "VCID-v3u2-k16m-9kdp" }, { "vulnerability": "VCID-v6e8-g5w8-k3ax" }, { "vulnerability": "VCID-vb1b-p4ka-qkb6" }, { "vulnerability": "VCID-vce7-4bp4-k3bq" }, { "vulnerability": "VCID-vcyc-ydxy-9bbh" }, { "vulnerability": "VCID-vh9v-4d1k-5ygk" }, { "vulnerability": "VCID-vpee-kdhr-xuf3" }, { "vulnerability": "VCID-vrd4-ue7s-queb" }, { "vulnerability": "VCID-vwzy-r5v5-mfbk" }, { "vulnerability": "VCID-vz6e-zxhj-8fa7" }, { "vulnerability": "VCID-w49b-cbcg-abat" }, { "vulnerability": "VCID-w816-x4a9-h7fq" }, { "vulnerability": "VCID-wbf3-5k7u-x7ap" }, { "vulnerability": "VCID-we9y-t7pz-j7hx" }, { "vulnerability": "VCID-wff6-3ran-c3gk" }, { "vulnerability": "VCID-wje6-u94m-h3d5" }, { "vulnerability": "VCID-wks9-hb2x-f7et" }, { "vulnerability": "VCID-wnuj-9531-h7ac" }, { "vulnerability": "VCID-wwx4-qepr-6ue8" }, { "vulnerability": "VCID-wy1e-xtu7-v3ah" }, { "vulnerability": "VCID-wy7x-h8yp-6kcs" }, { "vulnerability": "VCID-wz6y-gpz9-sqfp" }, { "vulnerability": "VCID-x4b3-bc23-7bdz" }, { "vulnerability": "VCID-x5a1-bdbv-2fbv" }, { "vulnerability": "VCID-x66k-fdng-tfan" }, { "vulnerability": "VCID-x84b-13ha-eubr" }, { "vulnerability": "VCID-x9wb-z2ae-q7b2" }, { "vulnerability": "VCID-xbkn-rk3f-33hw" }, { "vulnerability": "VCID-xdcp-b977-e3bm" }, { "vulnerability": "VCID-xdtj-kyur-ffg6" }, { "vulnerability": "VCID-xhej-v61s-vkht" }, { "vulnerability": "VCID-xr48-nm9h-fkds" }, { "vulnerability": "VCID-xsbb-51rw-p7e8" }, { "vulnerability": "VCID-xttb-bfmd-uyfh" }, { "vulnerability": "VCID-xv1n-1wbt-8ydw" }, { "vulnerability": "VCID-xw16-zng9-bug2" }, { "vulnerability": "VCID-xwcc-bu96-4bhf" }, { "vulnerability": "VCID-xyap-5sgd-2ydq" }, { "vulnerability": "VCID-xyug-3ymm-gqfq" }, { "vulnerability": "VCID-y1tn-gnuu-dqg1" }, { "vulnerability": "VCID-y3jr-1k58-9ye8" }, { "vulnerability": "VCID-y3nq-a16d-ebam" }, { "vulnerability": "VCID-y493-unyv-33bw" }, { "vulnerability": "VCID-y5a8-g4wd-93az" }, { "vulnerability": "VCID-y5fh-j64j-8ygt" }, { "vulnerability": "VCID-y5k6-v1cj-cqg6" }, { "vulnerability": "VCID-y922-jg2a-6fff" }, { "vulnerability": "VCID-y927-u929-17bd" }, { "vulnerability": "VCID-ye9d-bzdx-bbeq" }, { "vulnerability": "VCID-yjb1-4y48-a7g6" }, { "vulnerability": "VCID-ymb1-z8vm-vfa8" }, { "vulnerability": "VCID-yn9a-p67j-c7dk" }, { "vulnerability": "VCID-yqjc-khg8-uyb4" }, { "vulnerability": "VCID-yrgt-62vk-x3bn" }, { "vulnerability": "VCID-ywq5-39mf-cfcc" }, { "vulnerability": "VCID-yx7v-h35b-vuen" }, { "vulnerability": "VCID-z2b6-nmg2-1ue8" }, { "vulnerability": "VCID-z38e-4ju1-7ydy" }, { "vulnerability": "VCID-z438-846q-27f3" }, { "vulnerability": "VCID-z4z4-3e3q-zbfy" }, { "vulnerability": "VCID-z5ke-btzd-b7cx" }, { "vulnerability": "VCID-z957-baha-3bh1" }, { "vulnerability": "VCID-z9dc-47q8-7kc8" }, { "vulnerability": "VCID-z9hw-tudt-kufb" }, { "vulnerability": "VCID-zexv-k7ds-m3fx" }, { "vulnerability": "VCID-zgaf-91p1-kbfk" }, { "vulnerability": "VCID-zhf4-arnt-uqfx" }, { "vulnerability": "VCID-zk8m-c8de-rqbn" }, { "vulnerability": "VCID-zmfp-x82c-3kcd" }, { "vulnerability": "VCID-zp35-cq7g-pke3" }, { "vulnerability": "VCID-zpr8-r9ee-xbev" }, { "vulnerability": "VCID-zqds-fryf-tbgv" }, { "vulnerability": "VCID-zw9g-abft-skg9" }, { "vulnerability": "VCID-zwqw-xjzm-mbep" }, { "vulnerability": "VCID-zxc5-3vhg-b3hw" }, { "vulnerability": "VCID-zyta-2q43-5bae" }, { "vulnerability": "VCID-zzub-kp8h-2kar" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/openclaw@2026.2.19-1" } ], "aliases": [ "GHSA-8px5-2gfr-7ph6" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-bgb7-9jph-n3cj" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/77412?format=api", "vulnerability_id": "VCID-rwq3-29gy-hfcx", "summary": "OpenClaw versions 2026.1.21 prior to 2026.2.19 contain a path hijacking vulnerability in tools.exec.safeBins that allows attackers to bypass allowlist checks by controlling process PATH resolution. Attackers who can influence the gateway process PATH or launch environment can execute trojan binaries with allowlisted names, such as jq, circumventing executable validation controls.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2026-32015", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00017", "scoring_system": "epss", "scoring_elements": "0.04636", "published_at": "2026-06-11T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2026-32015" }, { "reference_url": "https://github.com/openclaw/openclaw", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "7.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/openclaw/openclaw" }, { "reference_url": "https://github.com/openclaw/openclaw/commit/28bac46c92069dc728524fbf383024c1b64e5c23", "reference_id": "28bac46c92069dc728524fbf383024c1b64e5c23", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "7.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-03-20T17:03:04Z/" } ], "url": "https://github.com/openclaw/openclaw/commit/28bac46c92069dc728524fbf383024c1b64e5c23" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32015", "reference_id": "CVE-2026-32015", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "7.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32015" }, { "reference_url": "https://github.com/advisories/GHSA-g75x-8qqm-2vxp", "reference_id": "GHSA-g75x-8qqm-2vxp", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-g75x-8qqm-2vxp" }, { "reference_url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-g75x-8qqm-2vxp", "reference_id": "GHSA-g75x-8qqm-2vxp", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "7.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-03-20T17:03:04Z/" } ], "url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-g75x-8qqm-2vxp" }, { "reference_url": "https://www.vulncheck.com/advisories/openclaw-path-hijacking-bypass-in-tools-exec-safebins-allowlist-validation", "reference_id": "openclaw-path-hijacking-bypass-in-tools-exec-safebins-allowlist-validation", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "7.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-03-20T17:03:04Z/" } ], "url": "https://www.vulncheck.com/advisories/openclaw-path-hijacking-bypass-in-tools-exec-safebins-allowlist-validation" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/39473?format=api", "purl": "pkg:npm/openclaw@2026.2.19", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-123y-4gt3-5yff" }, { "vulnerability": "VCID-12a9-am5h-9fch" }, { "vulnerability": "VCID-13uy-bfur-93c9" }, { "vulnerability": "VCID-15w3-g7at-47h9" }, { "vulnerability": "VCID-1bt7-g5ww-2fb1" }, { "vulnerability": "VCID-1cbb-8u8n-dqa8" }, { "vulnerability": "VCID-1f2r-y41u-y7b4" }, { "vulnerability": "VCID-1gsf-j6g3-4fd7" }, { "vulnerability": "VCID-1ht7-4wun-gba4" }, { "vulnerability": "VCID-1j9j-8qcc-tyhy" }, { "vulnerability": "VCID-1qwb-a969-kye3" }, { "vulnerability": "VCID-1sxg-r1bm-mygk" }, { "vulnerability": "VCID-1vjp-h67t-zqbx" }, { "vulnerability": "VCID-1wqp-rrgy-4ffe" }, { "vulnerability": "VCID-1xsa-kxhe-6ugq" }, { "vulnerability": "VCID-213t-kf4c-qfct" }, { "vulnerability": "VCID-24x5-nkt2-wbg7" }, { "vulnerability": "VCID-27ud-w29j-cbeq" }, { "vulnerability": "VCID-29xp-41b2-cycb" }, { "vulnerability": "VCID-2amg-4khy-1ufr" }, { "vulnerability": "VCID-2c8q-g4uw-mufb" }, { "vulnerability": "VCID-2d5p-gd51-3bfc" }, { "vulnerability": "VCID-2d6p-8jxd-1yc4" }, { "vulnerability": "VCID-2h93-dwfp-4yfe" }, { "vulnerability": "VCID-2keu-vgjt-t7ba" }, { "vulnerability": "VCID-2mq8-xddp-y7ef" }, { "vulnerability": "VCID-2t7c-q448-a7bp" }, { "vulnerability": "VCID-2tsv-9m6k-1qdn" }, { "vulnerability": "VCID-2vz1-7wq1-qbbk" }, { "vulnerability": "VCID-318g-779j-zubv" }, { "vulnerability": "VCID-3c7e-6d4p-cqdt" }, { "vulnerability": "VCID-3f2g-c9me-nbdm" }, { "vulnerability": "VCID-3f8g-rfq5-fbeb" }, { "vulnerability": "VCID-3fg7-n18p-cqek" }, { "vulnerability": "VCID-3qf3-mq53-fbgp" }, { "vulnerability": "VCID-3qmy-shux-qbaf" }, { "vulnerability": "VCID-3swm-pxgf-sqbx" }, { "vulnerability": "VCID-3z4d-sm3h-2bg4" }, { "vulnerability": "VCID-3zp7-juc8-cbf4" }, { "vulnerability": "VCID-416m-tsuc-b3fg" }, { "vulnerability": "VCID-45as-yk5j-dug2" }, { "vulnerability": "VCID-47ty-n3m4-nbbe" }, { "vulnerability": "VCID-484n-y2yq-73fw" }, { "vulnerability": "VCID-4ef4-xvcn-nbbq" }, { "vulnerability": "VCID-4fv2-atra-6ue3" }, { "vulnerability": "VCID-4kcu-akxv-hker" }, { "vulnerability": "VCID-4n9g-ymdq-6fhd" }, { "vulnerability": "VCID-4qqv-57ws-4yb3" }, { "vulnerability": "VCID-4rku-5hg1-kucn" }, { "vulnerability": "VCID-4srt-x1xb-xqa8" }, { "vulnerability": "VCID-4umw-rnj5-efad" }, { "vulnerability": "VCID-4x1j-ccq5-d7cu" }, { "vulnerability": "VCID-4yrw-qqvt-jkhn" }, { "vulnerability": "VCID-54js-czwp-jkce" }, { "vulnerability": "VCID-55vp-7m3m-pfem" }, { "vulnerability": "VCID-563k-49s5-5fbp" }, { "vulnerability": "VCID-59a9-8rag-mfg5" }, { "vulnerability": "VCID-59an-tnp2-qfgg" }, { "vulnerability": "VCID-5c35-mfrw-r3fg" }, { "vulnerability": "VCID-5czq-jh7n-a3d8" }, { "vulnerability": "VCID-5eqd-gfxe-t7g7" }, { "vulnerability": "VCID-5f5k-cvpn-9ycm" }, { "vulnerability": "VCID-5hvu-e2e8-y7h6" }, { "vulnerability": "VCID-5j3s-mfzd-2uex" }, { "vulnerability": "VCID-5jgs-gk2n-8fdk" }, { "vulnerability": "VCID-5k9d-n6kg-g3bn" }, { "vulnerability": "VCID-5msy-va7d-jkhz" }, { "vulnerability": "VCID-5qma-pezj-mucc" }, { "vulnerability": "VCID-5r19-s5sm-x7bj" }, { "vulnerability": "VCID-5szz-xqng-fffv" }, { "vulnerability": "VCID-5uvn-998w-hfds" }, { "vulnerability": "VCID-5zh4-jn4s-akc9" }, { "vulnerability": "VCID-64pj-77vs-8kbf" }, { "vulnerability": "VCID-65nh-ys6n-77ag" }, { "vulnerability": "VCID-6atn-d2zy-1qcm" }, { "vulnerability": "VCID-6bzc-dk3a-c7gk" }, { "vulnerability": "VCID-6ccy-jc9d-6qcm" }, { "vulnerability": "VCID-6ce4-zpfh-pybu" }, { "vulnerability": "VCID-6ctp-85cy-k3dz" }, { "vulnerability": "VCID-6cym-v42t-quh6" }, { "vulnerability": "VCID-6fjf-yjn7-qkbh" }, { "vulnerability": "VCID-6g13-hcrk-xucm" }, { "vulnerability": "VCID-6hav-n44a-dkeu" }, { "vulnerability": "VCID-6hhg-fpqw-kye9" }, { "vulnerability": "VCID-6mxs-hks9-guhr" }, { "vulnerability": "VCID-6mys-s3w1-cuc5" }, { "vulnerability": "VCID-6pq6-st7v-kbfy" }, { "vulnerability": "VCID-6vqt-8y4n-63h8" }, { "vulnerability": "VCID-6w88-6bts-sudv" }, { "vulnerability": "VCID-71uy-yz3c-n3et" }, { "vulnerability": "VCID-722e-beau-8kdc" }, { "vulnerability": "VCID-76at-qeek-4ugp" }, { "vulnerability": "VCID-76ju-xywr-7kfp" }, { "vulnerability": "VCID-7a1r-hefj-pfg4" }, { "vulnerability": "VCID-7bpx-6g2s-8kfd" }, { "vulnerability": "VCID-7dbw-4jba-83a4" }, { "vulnerability": "VCID-7gjj-xzp6-mqcx" }, { "vulnerability": "VCID-7hs9-xdrx-gqbh" }, { "vulnerability": "VCID-7j27-ndq2-mfht" }, { "vulnerability": "VCID-7kyj-gddz-gkfb" }, { "vulnerability": "VCID-7r7v-pvsj-uyaw" }, { "vulnerability": "VCID-7rcc-8g5p-3ydv" }, { "vulnerability": "VCID-7v88-gh66-ybgd" }, { "vulnerability": "VCID-812y-rb9q-m7eu" }, { "vulnerability": "VCID-82aq-wxf5-aka8" }, { "vulnerability": "VCID-84ms-aakm-x3dc" }, { "vulnerability": "VCID-86wa-z59e-xqgu" }, { "vulnerability": "VCID-8d4y-8k53-tqe8" }, { "vulnerability": "VCID-8ezv-nxwq-q3b1" }, { "vulnerability": "VCID-8h62-5c5b-cbdt" }, { "vulnerability": "VCID-8h7u-pr1w-z7df" }, { "vulnerability": "VCID-8k93-nveu-fbem" }, { "vulnerability": "VCID-8n16-rgcn-2bey" }, { "vulnerability": "VCID-8qct-rjx7-5ufs" }, { "vulnerability": "VCID-8qs2-h6se-9bav" }, { "vulnerability": "VCID-8sps-h6k2-43c9" }, { "vulnerability": "VCID-8x1d-qnqk-7qcz" }, { "vulnerability": "VCID-913y-6es4-jqer" }, { "vulnerability": "VCID-925q-556p-q3f6" }, { "vulnerability": "VCID-95y2-eute-yyfm" }, { "vulnerability": "VCID-9ate-5gcz-budv" }, { "vulnerability": "VCID-9csu-c6t3-3kak" }, { "vulnerability": "VCID-9fsp-y8ve-yqae" }, { "vulnerability": "VCID-9jhp-q7y2-8qdu" }, { "vulnerability": "VCID-9pv2-ufhu-w7g1" }, { "vulnerability": "VCID-9t16-uew2-ryhb" }, { "vulnerability": "VCID-9te9-qm18-ybcg" }, { "vulnerability": "VCID-9u9n-s6sc-2bhw" }, { "vulnerability": "VCID-9vbr-88pv-hudj" }, { "vulnerability": "VCID-9wbp-zj23-fyg4" }, { "vulnerability": "VCID-9xv8-jtc8-ekcr" }, { "vulnerability": "VCID-9z5y-grx7-fbap" }, { "vulnerability": "VCID-9zkk-mp8b-kbbg" }, { "vulnerability": "VCID-a4pw-9uzw-47ge" }, { "vulnerability": "VCID-a7hc-rue8-13eb" }, { "vulnerability": "VCID-a9q6-xpjm-6yfd" }, { "vulnerability": "VCID-adnz-kugc-63e6" }, { "vulnerability": "VCID-ae96-b8bt-43bv" }, { "vulnerability": "VCID-aegc-6ab1-k7hk" }, { "vulnerability": "VCID-afjz-us2v-k7ak" }, { "vulnerability": "VCID-agtk-z6cf-1bh7" }, { "vulnerability": "VCID-atc5-y6k6-zbg6" }, { "vulnerability": "VCID-b194-drmd-hkbp" }, { "vulnerability": "VCID-b3av-6zna-sugm" }, { "vulnerability": "VCID-b3nv-4pe7-fyhj" }, { "vulnerability": "VCID-bbsf-dk9q-nqh3" }, { "vulnerability": "VCID-bddn-w4cm-9udq" }, { "vulnerability": "VCID-bdx2-c7m3-xbfv" }, { "vulnerability": "VCID-bdzw-kmgp-yuaw" }, { "vulnerability": "VCID-bfj1-xxkp-aubu" }, { "vulnerability": "VCID-bj4f-1qy4-33g7" }, { "vulnerability": "VCID-bn3j-q22a-aybg" }, { "vulnerability": "VCID-bnzw-duu7-7fgu" }, { "vulnerability": "VCID-bqwy-vw6g-uudj" }, { "vulnerability": "VCID-br1n-wbkc-ybcj" }, { "vulnerability": "VCID-brzy-7832-5bhh" }, { "vulnerability": "VCID-bt5u-3vwp-rqcw" }, { "vulnerability": "VCID-bvyn-2c5r-4bce" }, { "vulnerability": "VCID-c198-v1zn-pbck" }, { "vulnerability": "VCID-c3fa-2u7p-pkgn" }, { "vulnerability": "VCID-c3hg-hct8-eqbv" }, { "vulnerability": "VCID-c723-znew-ebhm" }, { "vulnerability": "VCID-c8dt-7z8a-qufe" }, { "vulnerability": "VCID-c8mh-j256-j3aa" }, { "vulnerability": "VCID-cbdg-vzrj-puc2" }, { "vulnerability": "VCID-cf4u-fs5p-3ue3" }, { "vulnerability": "VCID-cfj6-nuq4-wudw" }, { "vulnerability": "VCID-cj2h-dvh1-1bhx" }, { "vulnerability": "VCID-ckjx-441a-zqfx" }, { "vulnerability": "VCID-cqm7-wncz-z3ed" }, { "vulnerability": "VCID-cqrj-mmkg-fkb1" }, { "vulnerability": "VCID-crh9-tw4p-2bgr" }, { "vulnerability": "VCID-cu3u-xqct-vqg6" }, { "vulnerability": "VCID-d34s-z46v-gygk" }, { "vulnerability": "VCID-d5d6-s6qw-1bbf" }, { "vulnerability": "VCID-d5tv-wk9w-8fcu" }, { "vulnerability": "VCID-d8dy-y1mu-bqgc" }, { "vulnerability": "VCID-dc4t-ydnk-wygg" }, { "vulnerability": "VCID-deuq-mfzr-d7c2" }, { "vulnerability": "VCID-dh5x-3xrq-hbfc" }, { "vulnerability": "VCID-djr4-azeh-mfap" }, { "vulnerability": "VCID-dnts-s9yw-5ydv" }, { "vulnerability": "VCID-dnym-w1cd-9fdj" }, { "vulnerability": "VCID-dpvy-8e93-13hb" }, { "vulnerability": "VCID-dtrh-kmkq-r7hd" }, { "vulnerability": "VCID-dtva-truu-4qac" }, { "vulnerability": "VCID-duqg-y513-2bd2" }, { "vulnerability": "VCID-dvpa-1jjf-dqap" }, { "vulnerability": "VCID-dvr7-ug54-1fcj" }, { "vulnerability": "VCID-dxpt-cg6z-17am" }, { "vulnerability": "VCID-e1s7-q6qr-4fbc" }, { "vulnerability": "VCID-e327-pu9e-x7gh" }, { "vulnerability": "VCID-e351-abpr-7fhx" }, { "vulnerability": "VCID-e6cf-mh6h-pqgn" }, { "vulnerability": "VCID-e6q6-e2my-gfce" }, { "vulnerability": "VCID-e84v-kdtb-5ycs" }, { "vulnerability": "VCID-e8sz-63dk-tfbs" }, { "vulnerability": "VCID-eaeg-e381-nyh5" }, { "vulnerability": "VCID-eay3-43e2-a7g9" }, { "vulnerability": "VCID-ed19-ejju-v3c7" }, { "vulnerability": "VCID-ed61-sus3-3yh9" }, { "vulnerability": "VCID-eefn-gpc1-mfdx" }, { "vulnerability": "VCID-eju9-rz5x-1bbk" }, { "vulnerability": "VCID-ekbd-qgdz-wqab" }, { "vulnerability": "VCID-emy9-ceb6-vfba" }, { "vulnerability": "VCID-epaf-29e7-kue8" }, { "vulnerability": "VCID-eq4c-dfbr-h7hr" }, { "vulnerability": "VCID-es6n-25j9-jqfe" }, { "vulnerability": "VCID-esfn-atcn-aygd" }, { "vulnerability": "VCID-esfq-5qft-rqf2" }, { "vulnerability": "VCID-esve-n4ww-rudc" }, { "vulnerability": "VCID-eu95-x34h-5bhb" }, { "vulnerability": "VCID-f19h-hsfh-n3a7" }, { "vulnerability": "VCID-f22e-sy58-g7fb" }, { "vulnerability": "VCID-f273-e6zd-cqbx" }, { "vulnerability": "VCID-f456-fjce-9bcz" }, { "vulnerability": "VCID-f5q3-7bm2-1kgw" }, { "vulnerability": "VCID-f7e2-bkh9-qbed" }, { "vulnerability": "VCID-f925-x5qa-buav" }, { "vulnerability": "VCID-f95y-gnx3-wydp" }, { "vulnerability": "VCID-f97e-xtcp-eqfe" }, { "vulnerability": "VCID-fgkb-fmuq-wffh" }, { "vulnerability": "VCID-fgvc-92pj-h3c1" }, { "vulnerability": "VCID-fs69-xwjn-5kez" }, { "vulnerability": "VCID-fwng-2afx-27bp" }, { "vulnerability": "VCID-fzag-upa9-n7cr" }, { "vulnerability": "VCID-g2ew-esnk-6ufd" }, { "vulnerability": "VCID-g2hf-mzjs-2fbn" }, { "vulnerability": "VCID-g7fp-6gzk-83gk" }, { "vulnerability": "VCID-g8k6-3qev-v7ga" }, { "vulnerability": "VCID-gd62-paxx-abgy" }, { "vulnerability": "VCID-ggpx-kfke-xfhr" }, { "vulnerability": "VCID-gh64-hwfz-p3ep" }, { "vulnerability": "VCID-gnq2-tc6q-h7hv" }, { "vulnerability": "VCID-gp5z-f4yu-wqhw" }, { "vulnerability": "VCID-gtx5-qd3p-cyd2" }, { "vulnerability": "VCID-gyeu-sff6-vfgb" }, { "vulnerability": "VCID-h35e-at78-gban" }, { "vulnerability": "VCID-h5h5-c9az-4be3" }, { "vulnerability": "VCID-h6wv-azua-wkgw" }, { "vulnerability": "VCID-h77b-c2kq-8kej" }, { "vulnerability": "VCID-h78a-py8h-ekgj" }, { "vulnerability": "VCID-hbkd-8rx2-4qb8" }, { "vulnerability": "VCID-hh2g-pzbh-13ax" }, { "vulnerability": "VCID-hha6-2yr5-x3dd" }, { "vulnerability": "VCID-hpwn-wgb8-xbh4" }, { "vulnerability": "VCID-hrnb-5t6m-jkaq" }, { "vulnerability": "VCID-hvg4-uvx3-mbg2" }, { "vulnerability": "VCID-hvv4-s4g7-vfea" }, { "vulnerability": "VCID-hxz1-6ma6-7bfj" }, { "vulnerability": "VCID-hy1q-5cfa-q7es" }, { "vulnerability": "VCID-j13w-x4ky-8yhd" }, { "vulnerability": "VCID-j5zq-h26v-6ub1" }, { "vulnerability": "VCID-j7bv-npgz-n7e7" }, { "vulnerability": "VCID-j7uv-qgjz-ubdq" }, { "vulnerability": "VCID-j915-992q-8fba" }, { "vulnerability": "VCID-j9kk-jqgm-kqbk" }, { "vulnerability": "VCID-jarm-du2f-1uef" }, { "vulnerability": "VCID-jdbz-6b2q-xyav" }, { "vulnerability": "VCID-jfuc-1dfh-vyh6" }, { "vulnerability": "VCID-jj5g-2uaq-tua3" }, { "vulnerability": "VCID-jnbs-cnfs-nkb5" }, { "vulnerability": "VCID-jux3-h9k5-zbc4" }, { "vulnerability": "VCID-juz5-e48p-hufx" }, { "vulnerability": "VCID-jwnv-j7hq-sbh9" }, { "vulnerability": "VCID-jzrz-3e6m-c7ez" }, { "vulnerability": "VCID-jzvr-jz7v-q3h1" }, { "vulnerability": "VCID-k19r-em9r-bybp" }, { "vulnerability": "VCID-k1fs-5s5j-xyh6" }, { "vulnerability": "VCID-k64p-h928-dfcs" }, { "vulnerability": "VCID-kact-h3hk-d7eg" }, { "vulnerability": "VCID-kdn3-sa62-4bef" }, { "vulnerability": "VCID-kfmd-usy4-afbu" }, { "vulnerability": "VCID-khan-g53z-kycn" }, { "vulnerability": "VCID-kk6q-qysv-eqe6" }, { "vulnerability": "VCID-kkqe-kjun-mufe" }, { "vulnerability": "VCID-kkw6-d2rs-9uh3" }, { "vulnerability": "VCID-kmue-xe85-hbgr" }, { "vulnerability": "VCID-kpbm-y7e6-t3gg" }, { "vulnerability": "VCID-kprt-1prq-n7bt" }, { "vulnerability": "VCID-kr71-ur8n-vqe1" }, { "vulnerability": "VCID-kt4v-cekr-fka8" }, { "vulnerability": "VCID-ktfy-rem3-k3d6" }, { "vulnerability": "VCID-kxyq-t74z-p3gf" }, { "vulnerability": "VCID-kzju-dt4v-syff" }, { "vulnerability": "VCID-kzy6-14nx-p3a6" }, { "vulnerability": "VCID-m3h2-6en6-2ye4" }, { "vulnerability": "VCID-m4qc-8d4v-dbe2" }, { "vulnerability": "VCID-m5mp-zry4-wfew" }, { "vulnerability": "VCID-m8ba-t6kp-3kcx" }, { "vulnerability": "VCID-magx-dxd3-qug2" }, { "vulnerability": "VCID-mdss-pw9y-7kh6" }, { "vulnerability": "VCID-msr2-gsjh-1bat" }, { "vulnerability": "VCID-mwj4-uf8p-e3bm" }, { "vulnerability": "VCID-mwyx-q85j-93dk" }, { "vulnerability": "VCID-n2xf-a53e-hkdn" }, { "vulnerability": "VCID-n3c5-p4ah-e7e9" }, { "vulnerability": "VCID-n77t-a476-8ye2" }, { "vulnerability": "VCID-n7cb-vz6z-cker" }, { "vulnerability": "VCID-n7kf-616a-67bk" }, { "vulnerability": "VCID-n8n3-2zmf-guhs" }, { "vulnerability": "VCID-n9kw-kgmv-nfhx" }, { "vulnerability": "VCID-na8n-2vex-zfdb" }, { "vulnerability": "VCID-ndwd-xjzr-3yd7" }, { "vulnerability": "VCID-ne92-59t9-q7c7" }, { "vulnerability": "VCID-nfvd-f7cc-tkhm" }, { "vulnerability": "VCID-njf8-w51n-qkgp" }, { "vulnerability": "VCID-nk7m-krnp-x3ej" }, { "vulnerability": "VCID-nkkj-ue4v-3ueh" }, { "vulnerability": "VCID-np53-nrkf-uyhe" }, { "vulnerability": "VCID-nsad-xxwh-cya4" }, { "vulnerability": "VCID-p53z-23c4-sych" }, { "vulnerability": "VCID-p9qc-pdbh-8qe8" }, { "vulnerability": "VCID-pbqc-njj8-1ucb" }, { "vulnerability": "VCID-pczy-1x3r-zfhg" }, { "vulnerability": "VCID-pdcf-d2ts-bfhs" }, { "vulnerability": "VCID-pe1f-8yv2-a7gn" }, { "vulnerability": "VCID-pe8x-6k73-eyd4" }, { "vulnerability": "VCID-pecx-xt79-1kht" }, { "vulnerability": "VCID-pjra-aaxs-ybek" }, { "vulnerability": "VCID-pksn-rpts-t7f8" }, { "vulnerability": "VCID-pm3t-c8dr-zkhy" }, { "vulnerability": "VCID-pnky-1fgw-mkdb" }, { "vulnerability": "VCID-psme-ems8-17e8" }, { "vulnerability": "VCID-pu7g-crjz-27c6" }, { "vulnerability": "VCID-pudw-8fpm-abak" }, { "vulnerability": "VCID-pxsn-dddj-a3hp" }, { "vulnerability": "VCID-pyut-62r7-6fgp" }, { "vulnerability": "VCID-pzqx-hyg6-cqhs" }, { "vulnerability": "VCID-q18t-kkbk-j3er" }, { "vulnerability": "VCID-q6h5-e93e-j3d7" }, { "vulnerability": "VCID-qcrw-m7k3-ubgm" }, { "vulnerability": "VCID-qhdq-m4mz-hyc1" }, { "vulnerability": "VCID-qjc6-9jy9-3qds" }, { "vulnerability": "VCID-qkbb-tk64-judu" }, { "vulnerability": "VCID-qmnc-zfxh-87g4" }, { "vulnerability": "VCID-qpq9-cabj-a7hj" }, { "vulnerability": "VCID-qqsk-1mk9-pygw" }, { "vulnerability": "VCID-qqz4-uy33-qya2" }, { "vulnerability": "VCID-qt48-xw6x-nudj" }, { "vulnerability": "VCID-qt8t-f9xc-qbgp" }, { "vulnerability": "VCID-qu81-grr8-x7af" }, { "vulnerability": "VCID-qujt-gddx-ckbm" }, { "vulnerability": "VCID-qwws-3gm7-ubfu" }, { "vulnerability": "VCID-qx6n-dk9c-8yd3" }, { "vulnerability": "VCID-qysu-d14g-j7hh" }, { "vulnerability": "VCID-r628-6er6-4qh5" }, { "vulnerability": "VCID-r75w-jwbm-dyew" }, { "vulnerability": "VCID-r9at-m759-wua3" }, { "vulnerability": "VCID-r9kn-e4wh-syh3" }, { "vulnerability": "VCID-rc3c-ycw2-nbcu" }, { "vulnerability": "VCID-rffw-fgxm-1ue9" }, { "vulnerability": "VCID-rm55-3hs1-23b4" }, { "vulnerability": "VCID-rnd8-vrah-d7fs" }, { "vulnerability": "VCID-rr2j-c7md-57gj" }, { "vulnerability": "VCID-s45u-hr8t-gffq" }, { "vulnerability": "VCID-s639-xhxx-v7fe" }, { "vulnerability": "VCID-sb3c-wxqd-akg3" }, { "vulnerability": "VCID-sbxm-vwhw-9fhd" }, { "vulnerability": "VCID-sfht-6w2y-yfc4" }, { "vulnerability": "VCID-skbd-d6ks-uqe4" }, { "vulnerability": "VCID-smdw-1pdp-e3er" }, { "vulnerability": "VCID-sqr6-smfg-uqdy" }, { "vulnerability": "VCID-sqxg-9akn-j7az" }, { "vulnerability": "VCID-svyq-6gm7-efez" }, { "vulnerability": "VCID-t14t-27xx-83g3" }, { "vulnerability": "VCID-t2b3-n8xb-k3fn" }, { "vulnerability": "VCID-t2hz-4acu-9bcy" }, { "vulnerability": "VCID-t7nn-6cy7-2yak" }, { "vulnerability": "VCID-t8uj-crn4-4qej" }, { "vulnerability": "VCID-t9ay-fhuq-q3dk" }, { "vulnerability": "VCID-tegh-qc36-ufha" }, { "vulnerability": "VCID-tfmw-ee3j-xuax" }, { "vulnerability": "VCID-tg1c-vs9g-8ya8" }, { "vulnerability": "VCID-tgnw-vne2-2kc1" }, { "vulnerability": "VCID-tm7a-1rzn-5yak" }, { "vulnerability": "VCID-tm94-jwz9-kkd6" }, { "vulnerability": "VCID-ts15-y9qj-13e9" }, { "vulnerability": "VCID-ttg2-j7x3-m7de" }, { "vulnerability": "VCID-tttc-8v5c-bqgk" }, { "vulnerability": "VCID-tyz3-w2hm-gqg7" }, { "vulnerability": "VCID-u9gs-nc3d-bubh" }, { "vulnerability": "VCID-ua3s-nu49-r3c3" }, { "vulnerability": "VCID-uass-9jcc-x3f5" }, { "vulnerability": "VCID-ub5p-bp37-hff5" }, { "vulnerability": "VCID-umc5-sf9t-p7h6" }, { "vulnerability": "VCID-unkk-dpkx-mkhk" }, { "vulnerability": "VCID-utnp-5swq-4qan" }, { "vulnerability": "VCID-uxkz-gf1t-kua1" }, { "vulnerability": "VCID-uztv-hr8t-dyeu" }, { "vulnerability": "VCID-v3g3-zvr2-3khy" }, { "vulnerability": "VCID-v3u2-k16m-9kdp" }, { "vulnerability": "VCID-v6e8-g5w8-k3ax" }, { "vulnerability": "VCID-vb1b-p4ka-qkb6" }, { "vulnerability": "VCID-vce7-4bp4-k3bq" }, { "vulnerability": "VCID-vcyc-ydxy-9bbh" }, { "vulnerability": "VCID-vh9v-4d1k-5ygk" }, { "vulnerability": "VCID-vpee-kdhr-xuf3" }, { "vulnerability": "VCID-vrd4-ue7s-queb" }, { "vulnerability": "VCID-vwzy-r5v5-mfbk" }, { "vulnerability": "VCID-vz6e-zxhj-8fa7" }, { "vulnerability": "VCID-w49b-cbcg-abat" }, { "vulnerability": "VCID-w816-x4a9-h7fq" }, { "vulnerability": "VCID-wbf3-5k7u-x7ap" }, { "vulnerability": "VCID-we9y-t7pz-j7hx" }, { "vulnerability": "VCID-wff6-3ran-c3gk" }, { "vulnerability": "VCID-wje6-u94m-h3d5" }, { "vulnerability": "VCID-wks9-hb2x-f7et" }, { "vulnerability": "VCID-wnuj-9531-h7ac" }, { "vulnerability": "VCID-wwx4-qepr-6ue8" }, { "vulnerability": "VCID-wy1e-xtu7-v3ah" }, { "vulnerability": "VCID-wy7x-h8yp-6kcs" }, { "vulnerability": "VCID-wz6y-gpz9-sqfp" }, { "vulnerability": "VCID-x5a1-bdbv-2fbv" }, { "vulnerability": "VCID-x66k-fdng-tfan" }, { "vulnerability": "VCID-x9wb-z2ae-q7b2" }, { "vulnerability": "VCID-xbkn-rk3f-33hw" }, { "vulnerability": "VCID-xdcp-b977-e3bm" }, { "vulnerability": "VCID-xdtj-kyur-ffg6" }, { "vulnerability": "VCID-xhej-v61s-vkht" }, { "vulnerability": "VCID-xr48-nm9h-fkds" }, { "vulnerability": "VCID-xsbb-51rw-p7e8" }, { "vulnerability": "VCID-xttb-bfmd-uyfh" }, { "vulnerability": "VCID-xv1n-1wbt-8ydw" }, { "vulnerability": "VCID-xw16-zng9-bug2" }, { "vulnerability": "VCID-xwcc-bu96-4bhf" }, { "vulnerability": "VCID-xyap-5sgd-2ydq" }, { "vulnerability": "VCID-xyug-3ymm-gqfq" }, { "vulnerability": "VCID-y1tn-gnuu-dqg1" }, { "vulnerability": "VCID-y3jr-1k58-9ye8" }, { "vulnerability": "VCID-y3nq-a16d-ebam" }, { "vulnerability": "VCID-y493-unyv-33bw" }, { "vulnerability": "VCID-y5a8-g4wd-93az" }, { "vulnerability": "VCID-y5fh-j64j-8ygt" }, { "vulnerability": "VCID-y5k6-v1cj-cqg6" }, { "vulnerability": "VCID-y922-jg2a-6fff" }, { "vulnerability": "VCID-y927-u929-17bd" }, { "vulnerability": "VCID-ye9d-bzdx-bbeq" }, { "vulnerability": "VCID-yjb1-4y48-a7g6" }, { "vulnerability": "VCID-ymb1-z8vm-vfa8" }, { "vulnerability": "VCID-yn9a-p67j-c7dk" }, { "vulnerability": "VCID-yqjc-khg8-uyb4" }, { "vulnerability": "VCID-yrgt-62vk-x3bn" }, { "vulnerability": "VCID-ywq5-39mf-cfcc" }, { "vulnerability": "VCID-yx7v-h35b-vuen" }, { "vulnerability": "VCID-z2b6-nmg2-1ue8" }, { "vulnerability": "VCID-z38e-4ju1-7ydy" }, { "vulnerability": "VCID-z438-846q-27f3" }, { "vulnerability": "VCID-z4z4-3e3q-zbfy" }, { "vulnerability": "VCID-z5ke-btzd-b7cx" }, { "vulnerability": "VCID-z957-baha-3bh1" }, { "vulnerability": "VCID-z9dc-47q8-7kc8" }, { "vulnerability": "VCID-zgaf-91p1-kbfk" }, { "vulnerability": "VCID-zhf4-arnt-uqfx" }, { "vulnerability": "VCID-zk8m-c8de-rqbn" }, { "vulnerability": "VCID-zmfp-x82c-3kcd" }, { "vulnerability": "VCID-zp35-cq7g-pke3" }, { "vulnerability": "VCID-zpr8-r9ee-xbev" }, { "vulnerability": "VCID-zqds-fryf-tbgv" }, { "vulnerability": "VCID-zw9g-abft-skg9" }, { "vulnerability": "VCID-zwqw-xjzm-mbep" }, { "vulnerability": "VCID-zxc5-3vhg-b3hw" }, { "vulnerability": "VCID-zyta-2q43-5bae" }, { "vulnerability": "VCID-zzub-kp8h-2kar" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/openclaw@2026.2.19" } ], "aliases": [ "CVE-2026-32015", "GHSA-g75x-8qqm-2vxp" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-rwq3-29gy-hfcx" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/71287?format=api", "vulnerability_id": "VCID-zexv-k7ds-m3fx", "summary": "OpenClaw versions 2026.1.21 prior to 2026.2.19 contain a command injection vulnerability in the Lobster extension's Windows shell fallback mechanism that allows attackers to inject arbitrary commands through tool-provided arguments. When spawn failures trigger shell fallback with shell: true, attackers can exploit cmd.exe command interpretation to execute malicious commands by controlling workflow arguments.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2026-31995", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00039", "scoring_system": "epss", "scoring_elements": "0.12176", "published_at": "2026-06-11T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2026-31995" }, { "reference_url": "https://github.com/openclaw/openclaw", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/openclaw/openclaw" }, { "reference_url": "https://github.com/openclaw/openclaw/commit/ba7be018da354ea9f803ed356d20464df0437916", "reference_id": "ba7be018da354ea9f803ed356d20464df0437916", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:L" }, { "value": "5.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N" }, { "value": "5.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-03-19T13:38:02Z/" } ], "url": "https://github.com/openclaw/openclaw/commit/ba7be018da354ea9f803ed356d20464df0437916" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31995", "reference_id": "CVE-2026-31995", "reference_type": "", "scores": [ { "value": "5.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31995" }, { "reference_url": "https://github.com/advisories/GHSA-fg3m-vhrr-8gj6", "reference_id": "GHSA-fg3m-vhrr-8gj6", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-fg3m-vhrr-8gj6" }, { "reference_url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-fg3m-vhrr-8gj6", "reference_id": "GHSA-fg3m-vhrr-8gj6", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:L" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "5.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N" }, { "value": "5.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-03-19T13:38:02Z/" } ], "url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-fg3m-vhrr-8gj6" }, { "reference_url": "https://www.vulncheck.com/advisories/openclaw-command-injection-via-windows-shell-fallback-in-lobster-extension", "reference_id": "openclaw-command-injection-via-windows-shell-fallback-in-lobster-extension", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:L" }, { "value": "5.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N" }, { "value": "5.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-03-19T13:38:02Z/" } ], "url": "https://www.vulncheck.com/advisories/openclaw-command-injection-via-windows-shell-fallback-in-lobster-extension" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/39473?format=api", "purl": "pkg:npm/openclaw@2026.2.19", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-123y-4gt3-5yff" }, { "vulnerability": "VCID-12a9-am5h-9fch" }, { "vulnerability": "VCID-13uy-bfur-93c9" }, { "vulnerability": "VCID-15w3-g7at-47h9" }, { "vulnerability": "VCID-1bt7-g5ww-2fb1" }, { "vulnerability": "VCID-1cbb-8u8n-dqa8" }, { "vulnerability": "VCID-1f2r-y41u-y7b4" }, { "vulnerability": "VCID-1gsf-j6g3-4fd7" }, { "vulnerability": "VCID-1ht7-4wun-gba4" }, { "vulnerability": "VCID-1j9j-8qcc-tyhy" }, { "vulnerability": "VCID-1qwb-a969-kye3" }, { "vulnerability": "VCID-1sxg-r1bm-mygk" }, { "vulnerability": "VCID-1vjp-h67t-zqbx" }, { "vulnerability": "VCID-1wqp-rrgy-4ffe" }, { "vulnerability": "VCID-1xsa-kxhe-6ugq" }, { "vulnerability": "VCID-213t-kf4c-qfct" }, { "vulnerability": "VCID-24x5-nkt2-wbg7" }, { "vulnerability": "VCID-27ud-w29j-cbeq" }, { "vulnerability": "VCID-29xp-41b2-cycb" }, { "vulnerability": "VCID-2amg-4khy-1ufr" }, { "vulnerability": "VCID-2c8q-g4uw-mufb" }, { "vulnerability": "VCID-2d5p-gd51-3bfc" }, { "vulnerability": "VCID-2d6p-8jxd-1yc4" }, { "vulnerability": "VCID-2h93-dwfp-4yfe" }, { "vulnerability": "VCID-2keu-vgjt-t7ba" }, { "vulnerability": "VCID-2mq8-xddp-y7ef" }, { "vulnerability": "VCID-2t7c-q448-a7bp" }, { "vulnerability": "VCID-2tsv-9m6k-1qdn" }, { "vulnerability": "VCID-2vz1-7wq1-qbbk" }, { "vulnerability": "VCID-318g-779j-zubv" }, { "vulnerability": "VCID-3c7e-6d4p-cqdt" }, { "vulnerability": "VCID-3f2g-c9me-nbdm" }, { "vulnerability": "VCID-3f8g-rfq5-fbeb" }, { "vulnerability": "VCID-3fg7-n18p-cqek" }, { "vulnerability": "VCID-3qf3-mq53-fbgp" }, { "vulnerability": "VCID-3qmy-shux-qbaf" }, { "vulnerability": "VCID-3swm-pxgf-sqbx" }, { "vulnerability": "VCID-3z4d-sm3h-2bg4" }, { "vulnerability": "VCID-3zp7-juc8-cbf4" }, { "vulnerability": "VCID-416m-tsuc-b3fg" }, { "vulnerability": "VCID-45as-yk5j-dug2" }, { "vulnerability": "VCID-47ty-n3m4-nbbe" }, { "vulnerability": "VCID-484n-y2yq-73fw" }, { "vulnerability": "VCID-4ef4-xvcn-nbbq" }, { "vulnerability": "VCID-4fv2-atra-6ue3" }, { "vulnerability": "VCID-4kcu-akxv-hker" }, { "vulnerability": "VCID-4n9g-ymdq-6fhd" }, { "vulnerability": "VCID-4qqv-57ws-4yb3" }, { "vulnerability": "VCID-4rku-5hg1-kucn" }, { "vulnerability": "VCID-4srt-x1xb-xqa8" }, { "vulnerability": "VCID-4umw-rnj5-efad" }, { "vulnerability": "VCID-4x1j-ccq5-d7cu" }, { "vulnerability": "VCID-4yrw-qqvt-jkhn" }, { "vulnerability": "VCID-54js-czwp-jkce" }, { "vulnerability": "VCID-55vp-7m3m-pfem" }, { "vulnerability": "VCID-563k-49s5-5fbp" }, { "vulnerability": "VCID-59a9-8rag-mfg5" }, { "vulnerability": "VCID-59an-tnp2-qfgg" }, { "vulnerability": "VCID-5c35-mfrw-r3fg" }, { "vulnerability": "VCID-5czq-jh7n-a3d8" }, { "vulnerability": "VCID-5eqd-gfxe-t7g7" }, { "vulnerability": "VCID-5f5k-cvpn-9ycm" }, { "vulnerability": "VCID-5hvu-e2e8-y7h6" }, { "vulnerability": "VCID-5j3s-mfzd-2uex" }, { "vulnerability": "VCID-5jgs-gk2n-8fdk" }, { "vulnerability": "VCID-5k9d-n6kg-g3bn" }, { "vulnerability": "VCID-5msy-va7d-jkhz" }, { "vulnerability": "VCID-5qma-pezj-mucc" }, { "vulnerability": "VCID-5r19-s5sm-x7bj" }, { "vulnerability": "VCID-5szz-xqng-fffv" }, { "vulnerability": "VCID-5uvn-998w-hfds" }, { "vulnerability": "VCID-5zh4-jn4s-akc9" }, { "vulnerability": "VCID-64pj-77vs-8kbf" }, { "vulnerability": "VCID-65nh-ys6n-77ag" }, { "vulnerability": "VCID-6atn-d2zy-1qcm" }, { "vulnerability": "VCID-6bzc-dk3a-c7gk" }, { "vulnerability": "VCID-6ccy-jc9d-6qcm" }, { "vulnerability": "VCID-6ce4-zpfh-pybu" }, { "vulnerability": "VCID-6ctp-85cy-k3dz" }, { "vulnerability": "VCID-6cym-v42t-quh6" }, { "vulnerability": "VCID-6fjf-yjn7-qkbh" }, { "vulnerability": "VCID-6g13-hcrk-xucm" }, { "vulnerability": "VCID-6hav-n44a-dkeu" }, { "vulnerability": "VCID-6hhg-fpqw-kye9" }, { "vulnerability": "VCID-6mxs-hks9-guhr" }, { "vulnerability": "VCID-6mys-s3w1-cuc5" }, { "vulnerability": "VCID-6pq6-st7v-kbfy" }, { "vulnerability": "VCID-6vqt-8y4n-63h8" }, { "vulnerability": "VCID-6w88-6bts-sudv" }, { "vulnerability": "VCID-71uy-yz3c-n3et" }, { "vulnerability": "VCID-722e-beau-8kdc" }, { "vulnerability": "VCID-76at-qeek-4ugp" }, { "vulnerability": "VCID-76ju-xywr-7kfp" }, { "vulnerability": "VCID-7a1r-hefj-pfg4" }, { "vulnerability": "VCID-7bpx-6g2s-8kfd" }, { "vulnerability": "VCID-7dbw-4jba-83a4" }, { "vulnerability": "VCID-7gjj-xzp6-mqcx" }, { "vulnerability": "VCID-7hs9-xdrx-gqbh" }, { "vulnerability": "VCID-7j27-ndq2-mfht" }, { "vulnerability": "VCID-7kyj-gddz-gkfb" }, { "vulnerability": "VCID-7r7v-pvsj-uyaw" }, { "vulnerability": "VCID-7rcc-8g5p-3ydv" }, { "vulnerability": "VCID-7v88-gh66-ybgd" }, { "vulnerability": "VCID-812y-rb9q-m7eu" }, { "vulnerability": "VCID-82aq-wxf5-aka8" }, { "vulnerability": "VCID-84ms-aakm-x3dc" }, { "vulnerability": "VCID-86wa-z59e-xqgu" }, { "vulnerability": "VCID-8d4y-8k53-tqe8" }, { "vulnerability": "VCID-8ezv-nxwq-q3b1" }, { "vulnerability": "VCID-8h62-5c5b-cbdt" }, { "vulnerability": "VCID-8h7u-pr1w-z7df" }, { "vulnerability": "VCID-8k93-nveu-fbem" }, { "vulnerability": "VCID-8n16-rgcn-2bey" }, { "vulnerability": "VCID-8qct-rjx7-5ufs" }, { "vulnerability": "VCID-8qs2-h6se-9bav" }, { "vulnerability": "VCID-8sps-h6k2-43c9" }, { "vulnerability": "VCID-8x1d-qnqk-7qcz" }, { "vulnerability": "VCID-913y-6es4-jqer" }, { "vulnerability": "VCID-925q-556p-q3f6" }, { "vulnerability": "VCID-95y2-eute-yyfm" }, { "vulnerability": "VCID-9ate-5gcz-budv" }, { "vulnerability": "VCID-9csu-c6t3-3kak" }, { "vulnerability": "VCID-9fsp-y8ve-yqae" }, { "vulnerability": "VCID-9jhp-q7y2-8qdu" }, { "vulnerability": "VCID-9pv2-ufhu-w7g1" }, { "vulnerability": "VCID-9t16-uew2-ryhb" }, { "vulnerability": "VCID-9te9-qm18-ybcg" }, { "vulnerability": "VCID-9u9n-s6sc-2bhw" }, { "vulnerability": "VCID-9vbr-88pv-hudj" }, { "vulnerability": "VCID-9wbp-zj23-fyg4" }, { "vulnerability": "VCID-9xv8-jtc8-ekcr" }, { "vulnerability": "VCID-9z5y-grx7-fbap" }, { "vulnerability": "VCID-9zkk-mp8b-kbbg" }, { "vulnerability": "VCID-a4pw-9uzw-47ge" }, { "vulnerability": "VCID-a7hc-rue8-13eb" }, { "vulnerability": "VCID-a9q6-xpjm-6yfd" }, { "vulnerability": "VCID-adnz-kugc-63e6" }, { "vulnerability": "VCID-ae96-b8bt-43bv" }, { "vulnerability": "VCID-aegc-6ab1-k7hk" }, { "vulnerability": "VCID-afjz-us2v-k7ak" }, { "vulnerability": "VCID-agtk-z6cf-1bh7" }, { "vulnerability": "VCID-atc5-y6k6-zbg6" }, { "vulnerability": "VCID-b194-drmd-hkbp" }, { "vulnerability": "VCID-b3av-6zna-sugm" }, { "vulnerability": "VCID-b3nv-4pe7-fyhj" }, { "vulnerability": "VCID-bbsf-dk9q-nqh3" }, { "vulnerability": "VCID-bddn-w4cm-9udq" }, { "vulnerability": "VCID-bdx2-c7m3-xbfv" }, { "vulnerability": "VCID-bdzw-kmgp-yuaw" }, { "vulnerability": "VCID-bfj1-xxkp-aubu" }, { "vulnerability": "VCID-bj4f-1qy4-33g7" }, { "vulnerability": "VCID-bn3j-q22a-aybg" }, { "vulnerability": "VCID-bnzw-duu7-7fgu" }, { "vulnerability": "VCID-bqwy-vw6g-uudj" }, { "vulnerability": "VCID-br1n-wbkc-ybcj" }, { "vulnerability": "VCID-brzy-7832-5bhh" }, { "vulnerability": "VCID-bt5u-3vwp-rqcw" }, { "vulnerability": "VCID-bvyn-2c5r-4bce" }, { "vulnerability": "VCID-c198-v1zn-pbck" }, { "vulnerability": "VCID-c3fa-2u7p-pkgn" }, { "vulnerability": "VCID-c3hg-hct8-eqbv" }, { "vulnerability": "VCID-c723-znew-ebhm" }, { "vulnerability": "VCID-c8dt-7z8a-qufe" }, { "vulnerability": "VCID-c8mh-j256-j3aa" }, { "vulnerability": "VCID-cbdg-vzrj-puc2" }, { "vulnerability": "VCID-cf4u-fs5p-3ue3" }, { "vulnerability": "VCID-cfj6-nuq4-wudw" }, { "vulnerability": "VCID-cj2h-dvh1-1bhx" }, { "vulnerability": "VCID-ckjx-441a-zqfx" }, { "vulnerability": "VCID-cqm7-wncz-z3ed" }, { "vulnerability": "VCID-cqrj-mmkg-fkb1" }, { "vulnerability": "VCID-crh9-tw4p-2bgr" }, { "vulnerability": "VCID-cu3u-xqct-vqg6" }, { "vulnerability": "VCID-d34s-z46v-gygk" }, { "vulnerability": "VCID-d5d6-s6qw-1bbf" }, { "vulnerability": "VCID-d5tv-wk9w-8fcu" }, { "vulnerability": "VCID-d8dy-y1mu-bqgc" }, { "vulnerability": "VCID-dc4t-ydnk-wygg" }, { "vulnerability": "VCID-deuq-mfzr-d7c2" }, { "vulnerability": "VCID-dh5x-3xrq-hbfc" }, { "vulnerability": "VCID-djr4-azeh-mfap" }, { "vulnerability": "VCID-dnts-s9yw-5ydv" }, { "vulnerability": "VCID-dnym-w1cd-9fdj" }, { "vulnerability": "VCID-dpvy-8e93-13hb" }, { "vulnerability": "VCID-dtrh-kmkq-r7hd" }, { "vulnerability": "VCID-dtva-truu-4qac" }, { "vulnerability": "VCID-duqg-y513-2bd2" }, { "vulnerability": "VCID-dvpa-1jjf-dqap" }, { "vulnerability": "VCID-dvr7-ug54-1fcj" }, { "vulnerability": "VCID-dxpt-cg6z-17am" }, { "vulnerability": "VCID-e1s7-q6qr-4fbc" }, { "vulnerability": "VCID-e327-pu9e-x7gh" }, { "vulnerability": "VCID-e351-abpr-7fhx" }, { "vulnerability": "VCID-e6cf-mh6h-pqgn" }, { "vulnerability": "VCID-e6q6-e2my-gfce" }, { "vulnerability": "VCID-e84v-kdtb-5ycs" }, { "vulnerability": "VCID-e8sz-63dk-tfbs" }, { "vulnerability": "VCID-eaeg-e381-nyh5" }, { "vulnerability": "VCID-eay3-43e2-a7g9" }, { "vulnerability": "VCID-ed19-ejju-v3c7" }, { "vulnerability": "VCID-ed61-sus3-3yh9" }, { "vulnerability": "VCID-eefn-gpc1-mfdx" }, { "vulnerability": "VCID-eju9-rz5x-1bbk" }, { "vulnerability": "VCID-ekbd-qgdz-wqab" }, { "vulnerability": "VCID-emy9-ceb6-vfba" }, { "vulnerability": "VCID-epaf-29e7-kue8" }, { "vulnerability": "VCID-eq4c-dfbr-h7hr" }, { "vulnerability": "VCID-es6n-25j9-jqfe" }, { "vulnerability": "VCID-esfn-atcn-aygd" }, { "vulnerability": "VCID-esfq-5qft-rqf2" }, { "vulnerability": "VCID-esve-n4ww-rudc" }, { "vulnerability": "VCID-eu95-x34h-5bhb" }, { "vulnerability": "VCID-f19h-hsfh-n3a7" }, { "vulnerability": "VCID-f22e-sy58-g7fb" }, { "vulnerability": "VCID-f273-e6zd-cqbx" }, { "vulnerability": "VCID-f456-fjce-9bcz" }, { "vulnerability": "VCID-f5q3-7bm2-1kgw" }, { "vulnerability": "VCID-f7e2-bkh9-qbed" }, { "vulnerability": "VCID-f925-x5qa-buav" }, { "vulnerability": "VCID-f95y-gnx3-wydp" }, { "vulnerability": "VCID-f97e-xtcp-eqfe" }, { "vulnerability": "VCID-fgkb-fmuq-wffh" }, { "vulnerability": "VCID-fgvc-92pj-h3c1" }, { "vulnerability": "VCID-fs69-xwjn-5kez" }, { "vulnerability": "VCID-fwng-2afx-27bp" }, { "vulnerability": "VCID-fzag-upa9-n7cr" }, { "vulnerability": "VCID-g2ew-esnk-6ufd" }, { "vulnerability": "VCID-g2hf-mzjs-2fbn" }, { "vulnerability": "VCID-g7fp-6gzk-83gk" }, { "vulnerability": "VCID-g8k6-3qev-v7ga" }, { "vulnerability": "VCID-gd62-paxx-abgy" }, { "vulnerability": "VCID-ggpx-kfke-xfhr" }, { "vulnerability": "VCID-gh64-hwfz-p3ep" }, { "vulnerability": "VCID-gnq2-tc6q-h7hv" }, { "vulnerability": "VCID-gp5z-f4yu-wqhw" }, { "vulnerability": "VCID-gtx5-qd3p-cyd2" }, { "vulnerability": "VCID-gyeu-sff6-vfgb" }, { "vulnerability": "VCID-h35e-at78-gban" }, { "vulnerability": "VCID-h5h5-c9az-4be3" }, { "vulnerability": "VCID-h6wv-azua-wkgw" }, { "vulnerability": "VCID-h77b-c2kq-8kej" }, { "vulnerability": "VCID-h78a-py8h-ekgj" }, { "vulnerability": "VCID-hbkd-8rx2-4qb8" }, { "vulnerability": "VCID-hh2g-pzbh-13ax" }, { "vulnerability": "VCID-hha6-2yr5-x3dd" }, { "vulnerability": "VCID-hpwn-wgb8-xbh4" }, { "vulnerability": "VCID-hrnb-5t6m-jkaq" }, { "vulnerability": "VCID-hvg4-uvx3-mbg2" }, { "vulnerability": "VCID-hvv4-s4g7-vfea" }, { "vulnerability": "VCID-hxz1-6ma6-7bfj" }, { "vulnerability": "VCID-hy1q-5cfa-q7es" }, { "vulnerability": "VCID-j13w-x4ky-8yhd" }, { "vulnerability": "VCID-j5zq-h26v-6ub1" }, { "vulnerability": "VCID-j7bv-npgz-n7e7" }, { "vulnerability": "VCID-j7uv-qgjz-ubdq" }, { "vulnerability": "VCID-j915-992q-8fba" }, { "vulnerability": "VCID-j9kk-jqgm-kqbk" }, { "vulnerability": "VCID-jarm-du2f-1uef" }, { "vulnerability": "VCID-jdbz-6b2q-xyav" }, { "vulnerability": "VCID-jfuc-1dfh-vyh6" }, { "vulnerability": "VCID-jj5g-2uaq-tua3" }, { "vulnerability": "VCID-jnbs-cnfs-nkb5" }, { "vulnerability": "VCID-jux3-h9k5-zbc4" }, { "vulnerability": "VCID-juz5-e48p-hufx" }, { "vulnerability": "VCID-jwnv-j7hq-sbh9" }, { "vulnerability": "VCID-jzrz-3e6m-c7ez" }, { "vulnerability": "VCID-jzvr-jz7v-q3h1" }, { "vulnerability": "VCID-k19r-em9r-bybp" }, { "vulnerability": "VCID-k1fs-5s5j-xyh6" }, { "vulnerability": "VCID-k64p-h928-dfcs" }, { "vulnerability": "VCID-kact-h3hk-d7eg" }, { "vulnerability": "VCID-kdn3-sa62-4bef" }, { "vulnerability": "VCID-kfmd-usy4-afbu" }, { "vulnerability": "VCID-khan-g53z-kycn" }, { "vulnerability": "VCID-kk6q-qysv-eqe6" }, { "vulnerability": "VCID-kkqe-kjun-mufe" }, { "vulnerability": "VCID-kkw6-d2rs-9uh3" }, { "vulnerability": "VCID-kmue-xe85-hbgr" }, { "vulnerability": "VCID-kpbm-y7e6-t3gg" }, { "vulnerability": "VCID-kprt-1prq-n7bt" }, { "vulnerability": "VCID-kr71-ur8n-vqe1" }, { "vulnerability": "VCID-kt4v-cekr-fka8" }, { "vulnerability": "VCID-ktfy-rem3-k3d6" }, { "vulnerability": "VCID-kxyq-t74z-p3gf" }, { "vulnerability": "VCID-kzju-dt4v-syff" }, { "vulnerability": "VCID-kzy6-14nx-p3a6" }, { "vulnerability": "VCID-m3h2-6en6-2ye4" }, { "vulnerability": "VCID-m4qc-8d4v-dbe2" }, { "vulnerability": "VCID-m5mp-zry4-wfew" }, { "vulnerability": "VCID-m8ba-t6kp-3kcx" }, { "vulnerability": "VCID-magx-dxd3-qug2" }, { "vulnerability": "VCID-mdss-pw9y-7kh6" }, { "vulnerability": "VCID-msr2-gsjh-1bat" }, { "vulnerability": "VCID-mwj4-uf8p-e3bm" }, { "vulnerability": "VCID-mwyx-q85j-93dk" }, { "vulnerability": "VCID-n2xf-a53e-hkdn" }, { "vulnerability": "VCID-n3c5-p4ah-e7e9" }, { "vulnerability": "VCID-n77t-a476-8ye2" }, { "vulnerability": "VCID-n7cb-vz6z-cker" }, { "vulnerability": "VCID-n7kf-616a-67bk" }, { "vulnerability": "VCID-n8n3-2zmf-guhs" }, { "vulnerability": "VCID-n9kw-kgmv-nfhx" }, { "vulnerability": "VCID-na8n-2vex-zfdb" }, { "vulnerability": "VCID-ndwd-xjzr-3yd7" }, { "vulnerability": "VCID-ne92-59t9-q7c7" }, { "vulnerability": "VCID-nfvd-f7cc-tkhm" }, { "vulnerability": "VCID-njf8-w51n-qkgp" }, { "vulnerability": "VCID-nk7m-krnp-x3ej" }, { "vulnerability": "VCID-nkkj-ue4v-3ueh" }, { "vulnerability": "VCID-np53-nrkf-uyhe" }, { "vulnerability": "VCID-nsad-xxwh-cya4" }, { "vulnerability": "VCID-p53z-23c4-sych" }, { "vulnerability": "VCID-p9qc-pdbh-8qe8" }, { "vulnerability": "VCID-pbqc-njj8-1ucb" }, { "vulnerability": "VCID-pczy-1x3r-zfhg" }, { "vulnerability": "VCID-pdcf-d2ts-bfhs" }, { "vulnerability": "VCID-pe1f-8yv2-a7gn" }, { "vulnerability": "VCID-pe8x-6k73-eyd4" }, { "vulnerability": "VCID-pecx-xt79-1kht" }, { "vulnerability": "VCID-pjra-aaxs-ybek" }, { "vulnerability": "VCID-pksn-rpts-t7f8" }, { "vulnerability": "VCID-pm3t-c8dr-zkhy" }, { "vulnerability": "VCID-pnky-1fgw-mkdb" }, { "vulnerability": "VCID-psme-ems8-17e8" }, { "vulnerability": "VCID-pu7g-crjz-27c6" }, { "vulnerability": "VCID-pudw-8fpm-abak" }, { "vulnerability": "VCID-pxsn-dddj-a3hp" }, { "vulnerability": "VCID-pyut-62r7-6fgp" }, { "vulnerability": "VCID-pzqx-hyg6-cqhs" }, { "vulnerability": "VCID-q18t-kkbk-j3er" }, { "vulnerability": "VCID-q6h5-e93e-j3d7" }, { "vulnerability": "VCID-qcrw-m7k3-ubgm" }, { "vulnerability": "VCID-qhdq-m4mz-hyc1" }, { "vulnerability": "VCID-qjc6-9jy9-3qds" }, { "vulnerability": "VCID-qkbb-tk64-judu" }, { "vulnerability": "VCID-qmnc-zfxh-87g4" }, { "vulnerability": "VCID-qpq9-cabj-a7hj" }, { "vulnerability": "VCID-qqsk-1mk9-pygw" }, { "vulnerability": "VCID-qqz4-uy33-qya2" }, { "vulnerability": "VCID-qt48-xw6x-nudj" }, { "vulnerability": "VCID-qt8t-f9xc-qbgp" }, { "vulnerability": "VCID-qu81-grr8-x7af" }, { "vulnerability": "VCID-qujt-gddx-ckbm" }, { "vulnerability": "VCID-qwws-3gm7-ubfu" }, { "vulnerability": "VCID-qx6n-dk9c-8yd3" }, { "vulnerability": "VCID-qysu-d14g-j7hh" }, { "vulnerability": "VCID-r628-6er6-4qh5" }, { "vulnerability": "VCID-r75w-jwbm-dyew" }, { "vulnerability": "VCID-r9at-m759-wua3" }, { "vulnerability": "VCID-r9kn-e4wh-syh3" }, { "vulnerability": "VCID-rc3c-ycw2-nbcu" }, { "vulnerability": "VCID-rffw-fgxm-1ue9" }, { "vulnerability": "VCID-rm55-3hs1-23b4" }, { "vulnerability": "VCID-rnd8-vrah-d7fs" }, { "vulnerability": "VCID-rr2j-c7md-57gj" }, { "vulnerability": "VCID-s45u-hr8t-gffq" }, { "vulnerability": "VCID-s639-xhxx-v7fe" }, { "vulnerability": "VCID-sb3c-wxqd-akg3" }, { "vulnerability": "VCID-sbxm-vwhw-9fhd" }, { "vulnerability": "VCID-sfht-6w2y-yfc4" }, { "vulnerability": "VCID-skbd-d6ks-uqe4" }, { "vulnerability": "VCID-smdw-1pdp-e3er" }, { "vulnerability": "VCID-sqr6-smfg-uqdy" }, { "vulnerability": "VCID-sqxg-9akn-j7az" }, { "vulnerability": "VCID-svyq-6gm7-efez" }, { "vulnerability": "VCID-t14t-27xx-83g3" }, { "vulnerability": "VCID-t2b3-n8xb-k3fn" }, { "vulnerability": "VCID-t2hz-4acu-9bcy" }, { "vulnerability": "VCID-t7nn-6cy7-2yak" }, { "vulnerability": "VCID-t8uj-crn4-4qej" }, { "vulnerability": "VCID-t9ay-fhuq-q3dk" }, { "vulnerability": "VCID-tegh-qc36-ufha" }, { "vulnerability": "VCID-tfmw-ee3j-xuax" }, { "vulnerability": "VCID-tg1c-vs9g-8ya8" }, { "vulnerability": "VCID-tgnw-vne2-2kc1" }, { "vulnerability": "VCID-tm7a-1rzn-5yak" }, { "vulnerability": "VCID-tm94-jwz9-kkd6" }, { "vulnerability": "VCID-ts15-y9qj-13e9" }, { "vulnerability": "VCID-ttg2-j7x3-m7de" }, { "vulnerability": "VCID-tttc-8v5c-bqgk" }, { "vulnerability": "VCID-tyz3-w2hm-gqg7" }, { "vulnerability": "VCID-u9gs-nc3d-bubh" }, { "vulnerability": "VCID-ua3s-nu49-r3c3" }, { "vulnerability": "VCID-uass-9jcc-x3f5" }, { "vulnerability": "VCID-ub5p-bp37-hff5" }, { "vulnerability": "VCID-umc5-sf9t-p7h6" }, { "vulnerability": "VCID-unkk-dpkx-mkhk" }, { "vulnerability": "VCID-utnp-5swq-4qan" }, { "vulnerability": "VCID-uxkz-gf1t-kua1" }, { "vulnerability": "VCID-uztv-hr8t-dyeu" }, { "vulnerability": "VCID-v3g3-zvr2-3khy" }, { "vulnerability": "VCID-v3u2-k16m-9kdp" }, { "vulnerability": "VCID-v6e8-g5w8-k3ax" }, { "vulnerability": "VCID-vb1b-p4ka-qkb6" }, { "vulnerability": "VCID-vce7-4bp4-k3bq" }, { "vulnerability": "VCID-vcyc-ydxy-9bbh" }, { "vulnerability": "VCID-vh9v-4d1k-5ygk" }, { "vulnerability": "VCID-vpee-kdhr-xuf3" }, { "vulnerability": "VCID-vrd4-ue7s-queb" }, { "vulnerability": "VCID-vwzy-r5v5-mfbk" }, { "vulnerability": "VCID-vz6e-zxhj-8fa7" }, { "vulnerability": "VCID-w49b-cbcg-abat" }, { "vulnerability": "VCID-w816-x4a9-h7fq" }, { "vulnerability": "VCID-wbf3-5k7u-x7ap" }, { "vulnerability": "VCID-we9y-t7pz-j7hx" }, { "vulnerability": "VCID-wff6-3ran-c3gk" }, { "vulnerability": "VCID-wje6-u94m-h3d5" }, { "vulnerability": "VCID-wks9-hb2x-f7et" }, { "vulnerability": "VCID-wnuj-9531-h7ac" }, { "vulnerability": "VCID-wwx4-qepr-6ue8" }, { "vulnerability": "VCID-wy1e-xtu7-v3ah" }, { "vulnerability": "VCID-wy7x-h8yp-6kcs" }, { "vulnerability": "VCID-wz6y-gpz9-sqfp" }, { "vulnerability": "VCID-x5a1-bdbv-2fbv" }, { "vulnerability": "VCID-x66k-fdng-tfan" }, { "vulnerability": "VCID-x9wb-z2ae-q7b2" }, { "vulnerability": "VCID-xbkn-rk3f-33hw" }, { "vulnerability": "VCID-xdcp-b977-e3bm" }, { "vulnerability": "VCID-xdtj-kyur-ffg6" }, { "vulnerability": "VCID-xhej-v61s-vkht" }, { "vulnerability": "VCID-xr48-nm9h-fkds" }, { "vulnerability": "VCID-xsbb-51rw-p7e8" }, { "vulnerability": "VCID-xttb-bfmd-uyfh" }, { "vulnerability": "VCID-xv1n-1wbt-8ydw" }, { "vulnerability": "VCID-xw16-zng9-bug2" }, { "vulnerability": "VCID-xwcc-bu96-4bhf" }, { "vulnerability": "VCID-xyap-5sgd-2ydq" }, { "vulnerability": "VCID-xyug-3ymm-gqfq" }, { "vulnerability": "VCID-y1tn-gnuu-dqg1" }, { "vulnerability": "VCID-y3jr-1k58-9ye8" }, { "vulnerability": "VCID-y3nq-a16d-ebam" }, { "vulnerability": "VCID-y493-unyv-33bw" }, { "vulnerability": "VCID-y5a8-g4wd-93az" }, { "vulnerability": "VCID-y5fh-j64j-8ygt" }, { "vulnerability": "VCID-y5k6-v1cj-cqg6" }, { "vulnerability": "VCID-y922-jg2a-6fff" }, { "vulnerability": "VCID-y927-u929-17bd" }, { "vulnerability": "VCID-ye9d-bzdx-bbeq" }, { "vulnerability": "VCID-yjb1-4y48-a7g6" }, { "vulnerability": "VCID-ymb1-z8vm-vfa8" }, { "vulnerability": "VCID-yn9a-p67j-c7dk" }, { "vulnerability": "VCID-yqjc-khg8-uyb4" }, { "vulnerability": "VCID-yrgt-62vk-x3bn" }, { "vulnerability": "VCID-ywq5-39mf-cfcc" }, { "vulnerability": "VCID-yx7v-h35b-vuen" }, { "vulnerability": "VCID-z2b6-nmg2-1ue8" }, { "vulnerability": "VCID-z38e-4ju1-7ydy" }, { "vulnerability": "VCID-z438-846q-27f3" }, { "vulnerability": "VCID-z4z4-3e3q-zbfy" }, { "vulnerability": "VCID-z5ke-btzd-b7cx" }, { "vulnerability": "VCID-z957-baha-3bh1" }, { "vulnerability": "VCID-z9dc-47q8-7kc8" }, { "vulnerability": "VCID-zgaf-91p1-kbfk" }, { "vulnerability": "VCID-zhf4-arnt-uqfx" }, { "vulnerability": "VCID-zk8m-c8de-rqbn" }, { "vulnerability": "VCID-zmfp-x82c-3kcd" }, { "vulnerability": "VCID-zp35-cq7g-pke3" }, { "vulnerability": "VCID-zpr8-r9ee-xbev" }, { "vulnerability": "VCID-zqds-fryf-tbgv" }, { "vulnerability": "VCID-zw9g-abft-skg9" }, { "vulnerability": "VCID-zwqw-xjzm-mbep" }, { "vulnerability": "VCID-zxc5-3vhg-b3hw" }, { "vulnerability": "VCID-zyta-2q43-5bae" }, { "vulnerability": "VCID-zzub-kp8h-2kar" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/openclaw@2026.2.19" } ], "aliases": [ "CVE-2026-31995", "GHSA-fg3m-vhrr-8gj6" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-zexv-k7ds-m3fx" } ], "fixing_vulnerabilities": [], "risk_score": "4.0", "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/openclaw@2026.1.21" }