Threats tagged 'ghsa-cm8v-2vh9-cxf3'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	5.3	CVE-2026-41915OpenClaw: GIT_DIR and related git plumbing env vars missing from exec env denylist (GHSA-m866-6qv5-p2fg variant) Medium5.32026-04-09GCVE DatabaseCVE-2026-41915 OpenClaw versions up to 2026.3.30 have a vulnerability where Git plumbing environment variables such as GIT_DIR were not removed from the execution environment denylist. This flaw could allow user-controlled local assistants to redirect Git operations improperly. The issue is fixed in version 2026.4.8. Vulnerability CWE-184 #ghsa-cm8v-2vh9-cxf3 #npm	GCVE Database	2026-04-09

Page 1 of 1