Threats tagged 'ghsa-82qx-6vj7-p8m2'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	7.7	CVE-2026-43571OpenClaw · Channel setup catalog lookups could include untrusted workspace plugin shadows High7.72026-04-17GCVE DatabaseCVE-2026-43571 OpenClaw versions prior to 2026.4.10 have a vulnerability where channel setup catalog lookups may include untrusted workspace plugin shadows. This can cause setup-time plugin loading without the intended trust gate, potentially allowing untrusted code execution during plugin setup. The issue is fixed in version 2026.4.10 and later. Report on CVE-2026-43571 Vulnerability CWE-829 #ghsa-82qx-6vj7-p8m2 #npm	GCVE Database	2026-04-17

Page 1 of 1