检索 GitHub Advisory Database 中的已审查与未审查安全公告。
| 公告编号 | 摘要 | 级别 | 生态 / 软件包 | 审查状态 | 发布时间 | 修改时间 |
|---|---|---|---|---|---|---|
| GHSA-GV2F-Q4WP-FVH5 | Duplicate Advisory: OpenClaw: CLI Remote Onboarding Persists Unauthenticated Discovery Endpoint and Exfiltrates Gateway Credentials 已撤回 | 高危 | npmopenclaw | 已审查 | 2026-04-24 08:31 | 2026-05-07 07:04 |
当前筛选结果 998 条 · 时间按北京时间显示
| GHSA-FJM8-MGC9-MF65 |
Duplicate Advisory: OpenClaw Has a Gateway Control Interface Information Disclosure Vulnerability 已撤回 |
| 中危 |
npmopenclaw |
| 已审查 |
| 2026-04-24 08:31 |
| 2026-05-05 05:52 |
| GHSA-CW28-63X4-37C3 | Duplicate Advisory: OpenClaw: Voice-call Plivo replay mutates in-process callback origin before replay rejection 已撤回 | 中危 | npmopenclaw | 已审查 | 2026-04-24 08:31 | 2026-05-05 05:55 |
| GHSA-7VQ9-42CC-33J4 | Duplicate Advisory: OpenClaw: Device-Paired Node Skips Node Scope Gate → Host RCE.md 已撤回 | 高危 | npmopenclaw | 已审查 | 2026-04-24 08:31 | 2026-05-05 05:59 |
| GHSA-2XP4-QHR4-XQM2 | Duplicate Advisory: OpenClaw: HTTP operator endpoints lack browser-origin validation in trusted-proxy mode 已撤回 | 低危 | npmopenclaw | 已审查 | 2026-04-24 08:31 | 2026-05-05 05:55 |
| GHSA-2HV5-4H3G-4HJV | Duplicate Advisory: OpenClaw: LINE webhook handler lacks shared pre-auth concurrency budget before signature verification 已撤回 | 中危 | npmopenclaw | 已审查 | 2026-04-24 08:31 | 2026-05-05 05:55 |
| GHSA-QGX9-6PX9-7P75 | Duplicate Advisory: OpenClaw: Assistant media route missed scope enforcement for trusted-proxy authorization 已撤回 | 低危 | npmopenclaw | 已审查 | 2026-04-24 02:33 | 2026-05-05 05:04 |
| GHSA-QMQ6-F8PR-CX5X | Duplicate Advisory: uuid: Missing buffer bounds check in v3/v5/v6 when buf is provided 已撤回 | 低危 | npmuuid | 已审查 | 2026-04-23 14:30 | 2026-05-05 20:59 |
| GHSA-XH5H-P8C5-4W4X | Duplicate Advisory: uutils coreutils has an Improper Handling of Unicode Encoding Issue 已撤回 | 低危 | crates.iocoreutils | 已审查 | 2026-04-23 02:31 | 2026-07-07 03:53 |
| GHSA-Q94G-3GCF-66X7 | Duplicate Advisory: uutils coreutils has an Incorrect Authorization issue 已撤回 | 中危 | crates.iocoreutils | 已审查 | 2026-04-23 02:31 | 2026-07-07 04:16 |
| GHSA-53GR-WMF4-8HH3 | Duplicate Advisory: uutils coreutils's User Interface (UI) Misrepresents Critical Information 已撤回 | 低危 | crates.iocoreutils | 已审查 | 2026-04-23 02:31 | 2026-07-07 03:55 |
| GHSA-532V-XP3F-837C | Duplicate Advisory: uutils coreutils has an Incorrect Provision of Specified Functionality Issue in its cut Utility 已撤回 | 低危 | crates.iocoreutils | 已审查 | 2026-04-23 02:31 | 2026-07-07 05:54 |
| GHSA-VF87-345H-9QHX | Duplicate Advisory: uutils coreutils has a Time-of-check Time-of-use (TOCTOU) Race Condition 已撤回 | 低危 | crates.iocoreutils | 已审查 | 2026-04-23 02:31 | 2026-07-07 04:16 |
| GHSA-VCHC-9GGH-3236 | Duplicate Advisory: uutils coreutils has a Path Traversal issue 已撤回 | 中危 | crates.iocoreutils | 已审查 | 2026-04-23 02:31 | 2026-07-07 04:20 |
| GHSA-V762-X3CF-5MFG | Duplicate Advisory: uutils coreutils has a Link Following Issue Via rm Utility 已撤回 | 中危 | crates.iocoreutils | 已审查 | 2026-04-23 02:31 | 2026-07-07 04:15 |
| GHSA-V24V-F45G-W7JF | Duplicate Advisory: uutils coreutils has a Time-of-Check to Time-of-Use (TOCTOU) race condition 已撤回 | 中危 | crates.iocoreutils | 已审查 | 2026-04-23 02:31 | 2026-07-07 03:54 |
| GHSA-RX8H-33GR-VHJ9 | Duplicate Advisory: uutils coreutils' comm utility incorrectly consumes data from non-regular file inputs before performing comparison operations 已撤回 | 中危 | crates.iocoreutils | 已审查 | 2026-04-23 02:31 | 2026-07-07 04:17 |
| GHSA-M26V-HJQ3-X245 | Duplicate Advisory: uutils coreutils has a Time-of-Check to Time-of-Use (TOCTOU) race condition 已撤回 | 中危 | crates.iocoreutils | 已审查 | 2026-04-23 02:31 | 2026-07-07 03:54 |
| GHSA-HWHF-8P2F-45WR | Duplicate Advisory: coreutils' comm utility silently corrupts data by performing lossy UTF-8 conversion on all output lines 已撤回 | 低危 | crates.iocoreutils | 已审查 | 2026-04-23 02:31 | 2026-07-07 03:51 |
| GHSA-HJ9R-8PFM-RMJJ | Duplicate Advisory: uutils coreutils has an Issue With its Always-Incorrect Control Flow Implementation 已撤回 | 低危 | crates.iocoreutils | 已审查 | 2026-04-23 02:31 | 2026-07-07 03:54 |
| GHSA-GPCG-H6X2-C26P | Duplicate Advisory: uutils coreutils has an Improper Input Validation issue 已撤回 | 中危 | crates.iocoreutils | 已审查 | 2026-04-23 02:31 | 2026-07-07 03:55 |
| GHSA-GGC5-46RG-MR4V | Duplicate Advisory: uutils coreutils has a Time-of-check Time-of-use (TOCTOU) Race Condition 已撤回 | 低危 | crates.iocoreutils | 已审查 | 2026-04-23 02:31 | 2026-07-07 04:25 |
| GHSA-79RC-QPW3-JV92 | Duplicate Advisory: uutils coreutils has an Improper Preservation of Permissions issue 已撤回 | 低危 | crates.iocoreutils | 已审查 | 2026-04-23 02:31 | 2026-07-07 05:53 |
| GHSA-7259-CWHX-3XX3 | Duplicate Advisory: uutils coreutils has an Improper Check for Unusual or Exceptional Conditions 已撤回 | 中危 | crates.iocoreutils | 已审查 | 2026-04-23 02:31 | 2026-07-07 04:25 |
| GHSA-67HP-F6HQ-2H6G | Duplicate Advisory: uutils coreutils Uses Incorrectly-Resolved Name or Reference 已撤回 | 中危 | crates.iocoreutils | 已审查 | 2026-04-23 02:31 | 2026-07-07 04:21 |