Author name: UNDERCODE

The vulnerability resides in the Elliptic Curve Integrated Encryption Scheme (ECIES) implementation used by Geth for encrypted RLPx handshakes and

The vulnerability exists in the Go Ethereum (Geth) client’s peer-to-peer (p2p) connection handshake mechanism. During the handshake process, both parties

The CVE-2025-3600 vulnerability exists in the `@langchain/langgraph-checkpoint-redis` package, specifically within the `list()` methods of the `RedisSaver` and `ShallowRedisSaver` classes .

The vulnerability in `filippo.io/edwards25519` resides in the `(Point).MultiScalarMult` method, which performs a multi-scalar multiplication on the Edwards curve . This

The vulnerability stems from Keras and TensorFlow honoring HDF5 “external storage” and “ExternalLink” features when loading model weights via `load_weights()`

This vulnerability is a time-based blind SQL injection found in LibreNMS versions prior to 24.4.0. The flaw resides in includes/html/table/address-search.inc.php,

The vulnerability CVE-2025-68154 exists in the `fsSize()` function of the systeminformation npm package for Node.js, specifically affecting Windows platforms .

The vulnerability resides in the `ajax_table.php` endpoint of an unspecified PHP application. When the `search_type` parameter is set to ipv6,

The vulnerability resides in how OpenClaw handles logging of errors and stack traces. Specifically, when OpenClaw makes requests to the

The vulnerability stems from how pypdf handles the `/ToUnicode` entry in a PDF’s font dictionary. During text extraction, the library

The vulnerability resides in the `normalizeForHash` function within src/agents/sandbox/config-hash.ts. This function was designed to create a deterministic hash from a

The vulnerability, identified as CVE-2025-55197 and published in the GitHub Advisory Database, affects the pypdf Python library (versions prior to

How CVE-2026-27004 Works The vulnerability stems from two distinct but related issues in OpenClaw versions up to 2026.2.14 . First,

A configuration injection vulnerability exists in OpenClaw’s Docker sandbox mechanism where dangerous Docker options can be applied to container executions.

The vulnerability addressed in this advisory is a path traversal issue in the skill installation process of OpenClaw . The

The vulnerability stems from how older versions of Minimatch (prior to 3.0.2) convert glob patterns into JavaScript `RegExp` objects. Specifically,

The vulnerability is a stored Cross-Site Scripting (XSS) issue in the OpenClaw Control UI. The gateway’s HTML response previously injected

The vulnerabilities arise from insufficient sanitization of user-controlled properties during SVG export. When attacker-crafted JSON is loaded via loadFromJSON(), properties

The vulnerability stems from an incorrect removal of the padding extension in the uTLS library when generating the non-Post-Quantum (non-pq)

The vulnerability, identified as CVE-2026-24688, is a denial-of-service flaw in the pypdf library affecting versions prior to 6.6.2 . It

A stored Cross-Site Scripting (XSS) vulnerability exists in LibreNMS versions prior to 25.12.0 within the Alert Rule API . The

A vulnerable node running Go Ethereum (Geth) can be forced to shut down or crash by a remote attacker sending

When Chrome generates a ClientHello with GREASE ECH (a mechanism to randomize ECH extensions for privacy), it selects the cipher

The vulnerability stems from a missing error check in the CRuby extension of Nokogiri, specifically within the `xmlC14NExecute` function. This

How the Mentioned CVE Works The vulnerability is a stored Cross-Site Scripting (XSS) issue existing in the device group creation

This reflected Cross-Site Scripting (XSS) vulnerability exists in the email field within the alerting settings page of LibreNMS. The application

The CVE-2024-50350 vulnerability is a Stored Cross-Site Scripting (XSS) issue found in LibreNMS, an open-source network monitoring system . It

How the CVE Works: The vulnerability resides in the Custom OID functionality of LibreNMS. When creating or editing a Custom

The vulnerability stems from a flawed retry mechanism within the `wifiNetworks()` function in lib/wifi.js. While the initial function call sanitizes

The vulnerability CVE-2024-23725 is a Cross-site Scripting (XSS) issue found in Ghost versions before 5.76.0, specifically within the `excerpt.js` component

The vulnerability is a remote code execution (RCE) flaw in the @tygo-van-den-hurk/slyde package. Node.js has a loading mechanism that automatically

The vulnerability resides in the credential refresh mechanism of Claude CLI on macOS. When refreshing OAuth tokens, the application constructs

The vulnerability stems from a fundamental discrepancy between how PickleScan and PyTorch parse serialized data to extract a file’s “magic

The BlueBubbles extension in OpenClaw versions prior to 2026.2.14 contains a path traversal vulnerability. The `sendBlueBubblesMedia` function improperly handles the

The vulnerability resides in the browser download helpers within OpenClaw versions from 2026.1.12 up to 2026.2.12. Specifically, the `waitForDownloadViaPlaywright` and

The vulnerability resides in OpenClaw’s browser control API, specifically in the endpoints POST /trace/stop, POST /wait/download, and POST /download. Prior

The vulnerability resides in the OpenClaw CLI’s process cleanup mechanism. The cleanup helpers performed a system-wide process enumeration, using pattern

The vulnerability exists because when the sandboxed browser feature is enabled, openclaw starts a local HTTP bridge server bound to

When requests to the internal network for webhooks are enabled, a server-side request forgery (SSRF) vulnerability in GitLab affects all

A command injection vulnerability exists in the `aquasecurity/trivy-action` (versions 0.31.0 through 0.33.1) due to the unsafe handling of user-controlled inputs

The vulnerability resides in the OPA-Envoy Plugin’s construction of the `input.parsed_path` field. When the plugin parses an HTTP request path,

The vulnerability allows an authenticated attacker to read arbitrary files from the Gateway host by manipulating the browser tool’s upload

The vulnerability resides in how OpenClaw clients handle discovery protocols (Bonjour/mDNS and DNS-SD) on a local network. These protocols use

The OpenClaw Gateway versions from 2026.1.5 up to 2026.2.13 contain a high-severity vulnerability where the software fails to properly validate

The vulnerability exists because the OpenClaw browser control server binds to loopback (localhost) but fails to validate the Origin or

The command hijacking vulnerability in OpenClaw arises from two distinct vectors where the application trusts untrusted PATH sources. First, in

This vulnerability stems from multiple webhook handlers within the OpenClaw and Clawdbot npm packages lacking a unified limit for request

The vulnerability CVE-2026-25474 resides in the Google Chat allowlisting functionality within the `extensions/googlechat/src/monitor.ts` component of OpenClaw and Clawdbot. The `allowFrom`

The vulnerability resides in the iMessage monitoring component (monitor-provider.ts) when `groupPolicy` is set to allowlist. The function responsible for determining

How CVE-2026-XXXX Works: OpenClaw versions up to 2026.2.9 contain a path traversal vulnerability in transcript file handling. The gateway constructs

The vulnerability, pending a CVE ID, resides in the Google Chat extension of OpenClaw (and its legacy package clawdbot) within

The vulnerability resides in the `fetchWithGuard` function within `src/media/input-files.ts` of OpenClaw and Clawdbot . When the application fetches media from

The vulnerability is a signature verification bypass in the optional voice-call extension of OpenClaw, an npm package. It specifically affects

The vulnerability in `tar.extract()` of the Node `tar` library allows an attacker-controlled archive to create a hardlink inside the extraction

The vulnerability resides in the `scripts/update-clawtributors.ts` script, a development tool not included in standard CLI installations. The script’s function is

The vulnerability exists in OpenClaw versions <=2026.2.13 when Slack DMs are configured with `dmPolicy=open` . Under this configuration, the Slack

The vulnerability resides in the authorization mechanism for Telegram allowlists within OpenClaw (and its predecessor Clawdbot). Prior to the patch,

The Tlon (Urbit) extension in OpenClaw versions up to 2026.2.13 accepted a user-provided base URL for authentication. The application used

The LibreDesk SSRF vulnerability (CVE pending as of 2025-12-07) allows an authenticated Application Admin to force the server to make

The vulnerability resides in the `extractArchive` function within src/infra/archive.ts. Prior to implementing strict resource budgets, the archive extraction process lacked

CVE-2024-7694 is a high-severity vulnerability in TeamT5 ThreatSonar Anti-Ransomware versions 3.4.5 and earlier. The issue stems from insufficient validation of

The vulnerability is a Denial of Service (DoS) flaw in the fast-xml-parser library’s XML entity expansion mechanism. The parser includes

This vulnerability affects OpenClaw deployments where the optional Microsoft Teams extension is enabled . When processing inbound messages containing attachments

How this CVE Works: This vulnerability stems from unsafe concurrent access to shared map structures in a Go-based C2 framework.

The vulnerability is an unauthenticated remote code execution (RCE) flaw in SmarterTools SmarterMail versions prior to build 9511, specifically within

The vulnerability resides in the `httpsig-hyper` Rust crate, which is used to implement HTTP Message Signatures based on RFC9421 .