Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:npm/openclaw@2026.2.18
purl pkg:npm/openclaw@2026.2.18
Tags Ghost
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score 2.0
Vulnerabilities affecting this package (1)
Advisory Summary Fixed in package version
GHSA-r6h2-5gqq-v5v6
Aliases:
CVE-2026-27485
OpenClaw: Reject symlinks in local skill packaging script ## Vulnerability `skills/skill-creator/scripts/package_skill.py` (a local helper script used when authors package skills) …
2026.2.19
Vulnerable
Vulnerabilities fixed by this package (1)

Advisory Summary Aliases
GHSA-wh94-p5m6-mr7j
OpenClaw Discord moderation authorization used untrusted sender identity in tool-driven flows ## Overview Discord moderation action handling (`timeout`, `kick`, `ban`) … CVE-2026-27484