Threats tagged 'ghsa-7ggg-pvrf-458v'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	5.3	CVE-2026-41391OpenClaw: PIP_INDEX_URL and UV_INDEX_URL bypass host exec env sanitization and redirect Python package-index traffic Medium5.32026-04-02GCVE DatabaseCVE-2026-41391 The OpenClaw package versions up to 2026.3.28 contain a vulnerability where the environment variables PIP_INDEX_URL and UV_INDEX_URL can bypass host execution environment sanitization. This allows redirection of Python package-index traffic, potentially enabling unauthorized or malicious package management operations. The issue is fixed in version 2026.3.31. Vulnerability CWE-184 #ghsa-7ggg-pvrf-458v #npm	GCVE Database	2026-04-02

Page 1 of 1