Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:npm/openclaw@2026.1.14-1
purl pkg:npm/openclaw@2026.1.14-1
Tags Ghost
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score 3.0
Vulnerabilities affecting this package (2)
Advisory Summary Fixed in package version
GHSA-rmxw-jxxx-4cpc
Aliases:
CVE-2026-28471
OpenClaw has a Matrix allowlist bypass via displayName and cross-homeserver localpart matching ### Summary OpenClaw Matrix DM allowlist matching could …
2026.2.2
Vulnerable
GHSA-qw99-grcx-4pvm
Aliases:
CVE-2026-28395
OpenClaw's Chrome extension relay binds publicly due to wildcard treated as loopback ## Summary The Chrome extension relay (`ensureChromeExtensionRelayServer`) previously …
2026.2.12
Vulnerable
This package is not known to fix any advisories.