Threats tagged 'ghsa-3vvq-q2qc-7rmp'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	7.1	CVE-2026-42428OpenClaw B-M3 · ClawHub package downloads are not enforced with integrity verification High7.12026-04-09GCVE DatabaseCVE-2026-42428 OpenClaw versions up to 2026.4.1 have a vulnerability where ClawHub package downloads do not enforce integrity verification. This allows plugin archives to be installed without validating archive or per-file integrity metadata. The issue affects the OpenClaw local assistant under its trust model and was fixed in version 2026.4.8. Vulnerability CWE-353 #ghsa-3vvq-q2qc-7rmp #npm	GCVE Database	2026-04-09

Page 1 of 1