Lookup for vulnerable packages by Package URL.

Purlpkg:npm/clawdbot@2026.2.14
Typenpm
Namespace
Nameclawdbot
Version2026.2.14
Qualifiers
Subpath
Is_vulnerablefalse
Next_non_vulnerable_version2026.1.29
Latest_non_vulnerable_version2026.2.14
Affected_by_vulnerabilities
Fixing_vulnerabilities
0
url VCID-fhr3-r8sj-ufes
vulnerability_id VCID-fhr3-r8sj-ufes
summary
OpenClaw iMessage group allowlist authorization inherited DM pairing-store identities
Under iMessage `groupPolicy=allowlist`, group authorization could be satisfied by sender identities coming from the DM pairing store, broadening DM trust into group contexts.
references
0
reference_url https://github.com/openclaw/openclaw
reference_id
reference_type
scores
url https://github.com/openclaw/openclaw
1
reference_url https://github.com/openclaw/openclaw/commit/872079d42fe105ece2900a1dd6ab321b92da2d59
reference_id
reference_type
scores
url https://github.com/openclaw/openclaw/commit/872079d42fe105ece2900a1dd6ab321b92da2d59
2
reference_url https://github.com/openclaw/openclaw/releases/tag/v2026.2.14
reference_id
reference_type
scores
url https://github.com/openclaw/openclaw/releases/tag/v2026.2.14
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2026-26328
reference_id CVE-2026-26328
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2026-26328
4
reference_url https://github.com/advisories/GHSA-g34w-4xqq-h79m
reference_id GHSA-g34w-4xqq-h79m
reference_type
scores
url https://github.com/advisories/GHSA-g34w-4xqq-h79m
5
reference_url https://github.com/openclaw/openclaw/security/advisories/GHSA-g34w-4xqq-h79m
reference_id GHSA-g34w-4xqq-h79m
reference_type
scores
url https://github.com/openclaw/openclaw/security/advisories/GHSA-g34w-4xqq-h79m
fixed_packages
0
url pkg:npm/clawdbot@2026.2.14
purl pkg:npm/clawdbot@2026.2.14
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/clawdbot@2026.2.14
aliases CVE-2026-26328, GHSA-g34w-4xqq-h79m
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-fhr3-r8sj-ufes
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:npm/clawdbot@2026.2.14