Search for packages
| purl | pkg:npm/openclaw@2026.1.21 |
| Tags | Ghost |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score | 3.5 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-g75x-8qqm-2vxp
Aliases: CVE-2026-32015 |
OpenClaw's `tools.exec.safeBins` PATH-hijack allowed trojan binaries to bypass allowlist checks ## Summary `tools.exec.safeBins` allowlist checks could be bypassed by PATH-hijacked … |
Vulnerable |
|
GHSA-8px5-2gfr-7ph6
|
Duplicate Advisory: OpenClaw has Windows Lobster shell fallback command injection in constrained fallback path ## Duplicate Advisory This advisory has … | There are no reported fixed by versions. |
|
CVE-2026-31995
Aliases: GHSA-fg3m-vhrr-8gj6 |
OpenClaw has Windows Lobster shell fallback command injection in constrained fallback path On Windows, the Lobster extension previously retried certain … |
Vulnerable Vulnerable |
|
GHSA-fg3m-vhrr-8gj6
Aliases: CVE-2026-31995 |
OpenClaw has Windows Lobster shell fallback command injection in constrained fallback path ### Summary On Windows, the Lobster extension previously … |
Vulnerable |