Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:npm/openclaw@2.0.0-beta3
purl pkg:npm/openclaw@2.0.0-beta3
Tags Ghost
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score 3.8
Vulnerabilities affecting this package (2)
Advisory Summary Fixed in package version
GHSA-hv93-r4j3-q65f

OpenClaw Hook Session Key Override Enables Targeted Cross-Session Routing ## Summary The issue is not deterministic session keys by itself. …
2026.2.12
Vulnerable
GHSA-7xhj-55q9-pc3m
Aliases:
CVE-2026-28393
OpenClaw's hook transform module path allows traversal and arbitrary JavaScript module loading ## Summary OpenClaw hook mapping transforms could be …
2026.2.14
Vulnerable
This package is not known to fix any advisories.