Threats tagged 'ghsa-2767-2q9v-9326'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	8.3	CVE-2026-43526OpenClaw · QQBot reply media URL handling could trigger SSRF and re-upload fetched bytes High8.32026-04-17GCVE DatabaseCVE-2026-43526 A vulnerability in the openclaw npm package prior to version 2026.4.12 allows SSRF via QQBot reply media URL handling. This flaw causes the system to treat remote media URLs as trusted, enabling SSRF fetches whose returned bytes are re-uploaded through the channel. The issue is fixed in openclaw version 2026.4.12 and later. Report on CVE-2026-43526 Vulnerability CWE-918 #ghsa-2767-2q9v-9326 #npm	GCVE Database	2026-04-17

Page 1 of 1