Threats tagged 'ghsa-w8g9-x8gx-crmm'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	4.8	CVE-2026-42430OpenClaw · Strict browser SSRF bypass in Playwright redirect handling leaves private targets reachable Medium4.82026-04-09GCVE DatabaseCVE-2026-42430 CVE-2026-42430 is a vulnerability in the OpenClaw package (npm) version 2026.3.8 where strict browser SSRF (Server-Side Request Forgery) protections can be bypassed during Playwright redirect handling, allowing navigation to private network targets. This flaw was fixed in version 2026.4.8. The vulnerability has a medium severity with a CVSS score of 6.5. Report on CVE-2026-42430 Vulnerability CWE-918 #ghsa-w8g9-x8gx-crmm #npm	GCVE Database	2026-04-09

Page 1 of 1