Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:npm/openclaw@2026.3.13-1
purl pkg:npm/openclaw@2026.3.13-1
Tags Ghost
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score 4.4
Vulnerabilities affecting this package (2)
Advisory Summary Fixed in package version
GHSA-gg9v-mgcp-v6m7
Aliases:
CVE-2026-41386
OpenClaw: Unbound bootstrap setup codes allow privilege escalation during pairing ## Summary Bootstrap setup codes were not bound to the …
2026.3.22
Vulnerable
GHSA-h5hg-h7rr-gpf3

OpenClaw: Node browser proxy `allowProfiles` bypass through persistent profile mutation and runtime profile selection ## Summary Node browser proxy `allowProfiles` …
2026.3.22
Vulnerable
This package is not known to fix any advisories.