2026

OpenClaw 2026.2.26 before 2026.3.31 enforces pending pairing-request caps per channel file instead of per account, allow

OpenClaw before 2026.3.31 contains a credential exposure vulnerability in media download functionality that forwards Aut

OpenClaw before 2026.3.28 contains a privilege escalation vulnerability in the chat.send endpoint that allows write-scop

OpenClaw before 2026.3.31 lacks a shared pre-auth concurrency budget on the public LINE webhook path, allowing attackers

OpenClaw before 2026.3.28 contains an authentication bypass vulnerability in the remote onboarding component that persis

OpenClaw before 2026.3.31 contains a logic error in Discord component interaction routing that misclassifies group direc

OpenClaw before 2026.3.31 contains an authentication boundary vulnerability where Telegram legacy allowFrom migration in

OpenClaw before 2026.4.2 exposes configPath and stateDir metadata in Gateway connect success snapshots to non-admin auth

OpenClaw before 2026.3.31 contains a time-of-check-time-of-use vulnerability in sandbox file operations that allows atta

OpenClaw before 2026.3.31 contains a callback origin mutation vulnerability in Plivo voice-call replay that allows attac

OpenClaw before 2026.3.31 allows workspace .env files to override the OPENCLAW_BUNDLED_HOOKS_DIR environment variable, e

OpenClaw before 2026.3.31 contains an information disclosure vulnerability in the Control Interface bootstrap JSON that

OpenClaw before 2026.3.31 contains a decompression bomb vulnerability in image processing that fails to properly enforce

OpenClaw before 2026.3.31 contains an authentication rate limiting bypass vulnerability that allows attackers to circumv

OpenClaw before 2026.3.28 contains an environment variable sanitization vulnerability where GIT_TEMPLATE_DIR and AWS_CON

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, the GraphCypher

Server-side request forgery (ssrf) in Microsoft Entra ID Entitlement Management allows an unauthorized attacker to perfo

Deserialization of untrusted data in Microsoft Bing allows an unauthorized attacker to execute code over a network.

Url redirection to untrusted site ('open redirect') in M365 Copilot allows an unauthorized attacker to elevate privilege

Server-side request forgery (ssrf) in Microsoft Dynamics 365 (Online) allows an unauthorized attacker to perform spoofin

Uncontrolled search path element in Microsoft Power Apps allows an unauthorized attacker to execute code over a network.

A request smuggling vulnerability exists in libsoup's HTTP/1 header parsing logic. The soup_message_headers_append_commo

KTransformers through 0.5.3 contains an unsafe deserialization vulnerability in the balance_serve backend mode where the

Server-side request forgery (ssrf) in Microsoft Purview allows an unauthorized attacker to elevate privileges over a net

Improper certificate validation in Microsoft Partner Center allows an unauthorized attacker to elevate privileges over a

radare2-mcp version 1.6.0 and earlier contains an os command injection vulnerability that allows remote attackers to exe

radare2 prior to 6.1.4 contains a path traversal vulnerability in its project notes handling that allows attackers to re

radare2 prior to 6.1.4 contains a path traversal vulnerability in project deletion that allows local attackers to recurs

A weakness in SpiceJet’s public booking retrieval page permits full passenger booking details to be accessed using only

A vulnerability in SpiceJet’s booking API allows unauthenticated users to query passenger name records (PNRs) without an

SWUpdate contains an integer underflow vulnerability in the multipart upload parser in mongoose_multipart.c that allows

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, the text-to-spe

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, the GET /api/v1

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, a Mass Assignme

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, this vulnerabil

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, the password re

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, Flowise contain

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, the core securi

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, a Server-Side R

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, a Server-Side R

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, the Chatflow co

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, Flowise is vuln

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, an improper mas

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, /api/v1/public-

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, the specific fl

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, the specific fl

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, there is a remo

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, The CSVAgent al

LeRobot through 0.5.1 contains an unsafe deserialization vulnerability in the async inference pipeline where pickle.load

Intrado 911 Emergency Gateway (EGW) 5.x, 6.x, and 7.x contain a path traversal vulnerability in the download_debuglog_fi