Security advisories

medium2026-03-27

CVE-2026-35628-OpenClaw: Telegram Webhook Missing Guess Rate Limiting Enables Brute-Force Guessing of Weak Webhook Secret

openclaw/openclaw · GHSA-vcx4-4qxg-mfp4

medium2026-03-27

OpenClaw: BlueBubbles Group Reactions Bypass requireMention and Still Enqueue Agent-Visible System Events

openclaw/openclaw · GHSA-mw7w-g3mg-xqm7

medium2026-03-27

CVE-2026-35647-OpenClaw: Matrix Verification Notices Bypass Matrix DM Policy and Reply to Unpaired DM Peers

openclaw/openclaw · GHSA-9wqx-g2cw-vc7r

medium2026-03-27

CVE-2026-35623-OpenClaw: BlueBubbles Webhook Missing Rate Limiting Enables Brute-Force Password Guessing

openclaw/openclaw · GHSA-xq8g-hgh6-87hv

high2026-03-27

CVE-2026-35669-OpenClaw: Gateway Plugin HTTP Auth Grants Unrestricted operator.admin Runtime Scope to All Callers

openclaw/openclaw · GHSA-qm2m-28pf-hgjw

critical2026-03-27

OpenClaw: Silent privilege escalation via gateway shared-auth reconnect

openclaw/openclaw · GHSA-fqw4-mph7-2vr8

critical2026-03-27

CVE-2026-35663-OpenClaw: Gateway Backend Reconnect lets Non-Admin Operator Scopes Self-Claim operator.admin

openclaw/openclaw · GHSA-9hjh-fr4f-gxc4

high2026-03-27

OpenClaw: Gateway HTTP /sessions/:sessionKey/kill Reaches Admin Kill Path Without Caller Scope Binding

openclaw/openclaw · GHSA-9p93-7j67-5pc2

high2026-03-27

CVE-2026-34204-MinIO is Vulnerable to SSE Metadata Injection via Replication Headers

minio/minio · GHSA-3rh2-v3gr-35p9

medium2026-03-27

CVE-2026-4923-path-to-regexp vulnerable to Regular Expression Denial of Service via multiple wildcards

pillarjs/path-to-regexp · GHSA-27v5-c462-wpq7

high2026-03-27

CVE-2026-4926-path-to-regexp vulnerable to Denial of Service via sequential optional groups

pillarjs/path-to-regexp · GHSA-j3q9-mxjg-w52f

high2026-03-27

AWS SDK for .NET: Improper escaping of special characters in CloudFront policy document construction

aws/aws-sdk-net · GHSA-mvm6-f9r3-fgfx

critical2026-03-27

CVE-2026-34202-Zebra node crash — V5 transaction hash panic (P2P reachable)

zcashfoundation/zebra · GHSA-qp6f-w4r3-h8wg

high2026-03-27

CVE-2026-34172-Giskard Agents have Server-side template injection via ChatWorkflow.chat() using non-sandboxed Jinja2 Environment

giskard-ai/giskard-oss · GHSA-frv4-x25r-588m

high2026-03-27

AWS SDK for Java 2.0: Improper Handling of Special Characters in CloudFront Signing Utilities

aws/aws-sdk-java-v2 · GHSA-443w-3rq3-5m5h

medium2026-03-27

CVE-2026-65914-DOMPurify is vulnerable to mutation-XSS via Re-Contextualization

cure53/dompurify · GHSA-h8r8-wccr-v5f2

medium2026-03-27

CVE-2026-33433-Traefik Vulnerable to BasicAuth/DigestAuth Identity Spoofing via Non-Canonical headerField

traefik/traefik · GHSA-qr99-7898-vr7c

low2026-03-27

CVE-2026-33045-Home Assistant has stored XSS in history-graphs

home-assistant/core · GHSA-46j8-vpx8-6p72

low2026-03-27

CVE-2026-33044-Home Assistant has stored XSS in Map-card through malicious device name

home-assistant/core · GHSA-r584-6283-p7xc

high2026-03-27

CVE-2026-32241-Flannel has cross-node remote code execution via extension backend BackendData injection

flannel-io/flannel · GHSA-vchx-5pr6-ffx2