Threats tagged 'ghsa-527m-976r-jf79'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	4.9	CVE-2026-43573OpenClaw · Existing-session browser interaction routes bypassed SSRF policy enforcement Medium4.92026-04-17GCVE DatabaseCVE-2026-43573 OpenClaw versions prior to 2026.4.10 have a vulnerability where existing-session browser interaction routes bypass server-side request forgery (SSRF) policy enforcement. This allows these routes to interact with or navigate targets without the SSRF navigation guard applied to other guarded browser routes. The issue was fixed in version 2026.4.10 and later. Report on CVE-2026-43573 Vulnerability CWE-862 #ghsa-527m-976r-jf79 #npm	GCVE Database	2026-04-17

Page 1 of 1