deardaniel/secdata-raw huggingface dataset:
GitHub Security Advisory: GHSA-8f9r-gr6r-x63q
Package: openclaw (NPM)
Severity: MODERATE (CVSS 5.3)
CWE: CWE-696: Incorrect Behavior Order
Vulnerable versions: < 2026.3.28
Patched in: 2026.3.28

Summary: Duplicate Advisory: OpenClaw: Feishu webhook reads and parses unauthenticated request bodies before signature validation

Details:
### Duplicate Advisory
This advisory has been withdrawn because it is a duplicate of GHSA-3h52-cx59-c456. This link is maintained to preserve external references.

### Original Description
OpenClaw before 2026.3.25 parses JSON request bodies before validating webhook signatures, allowing unauthenticated attackers to force resource-intensive parsing operations. Remote attackers can send malicious webhook requests to trigger denial of service by exhausting server resources through forced JSON parsing before signature rejection.
GitHub Security Advisory: GHSA-p6j4-wvmc-vx2h
Package: openclaw (NPM)
Severity: MODERATE (CVSS 7.3)
CWE: CWE-696: Incorrect Behavior Order
Vulnerable versions: < 2026.3.22
Patched in: 2026.3.22

Summary: Duplicate Advisory: OpenClaw: Tlon cite expansion happens before channel and DM authorization is complete

Details:
### Duplicate Advisory
This advisory has been withdrawn because it is a duplicate of GHSA-vfg3-pqpq-93m4. This link is maintained to preserve external references.

### Original Description
OpenClaw before 2026.3.22 performs cite expansion before completing channel and DM authorization checks, allowing cite work and content handling prior to final auth decisions. Attackers can exploit this timing vulnerability to access or manipulate content before proper authorization validation occurs.
GitHub Security Advisory: GHSA-r3v5-2grc-429h
Package: openclaw (NPM)
Severity: HIGH (CVSS 8.8)
CWE: CWE-648: Incorrect Use of Privileged APIs
Vulnerable versions: < 2026.3.22
Patched in: 2026.3.22

Summary: Duplicate Advisory: OpenClaw Gateway: RCE and Privilege Escalation from operator.pairing to operator.admin via device.pair.approve

Details:
### Duplicate Advisory
This advisory has been withdrawn because it is a duplicate of GHSA-hf68-49fm-59cq. This link is maintained to preserve external references.

### Original Description
OpenClaw before 2026.3.22 contains a privilege escalation vulnerability in the device.pair.approve method that allows an operator.pairing approver to approve pending device requests with broader operator scopes than the approver actually holds. Attackers can exploit insufficient scope validation to escalate privileges to operator.admin and achieve remote code execution on the Node infrastructure.
GitHub Security Advisory: GHSA-g8mc-c5f2-mqg7
Package: openclaw (NPM)
Severity: MODERATE (CVSS 4.8)
CWE: CWE-706: Use of Incorrectly-Resolved Name or Reference
Vulnerable versions: < 2026.3.22
Patched in: 2026.3.22

Summary: Duplicate Advisory: OpenClaw Bypasses DM Policy Separation via Synology Chat Webhook Path Collision

Details:
### Duplicate Advisory
This advisory has been withdrawn because it is a duplicate of GHSA-rqp8-q22p-5j9q This link is maintained to preserve external references.

### Original Description
OpenClaw before 2026.3.22 contains a webhook path route replacement vulnerability in the Synology Chat extension that allows attackers to collapse multi-account configurations onto shared webhook paths. Attackers can exploit inherited or duplicate webhook paths to bypass per-account DM access control policies and replace route ownership across accounts.
GitHub Security Advisory: GHSA-9gvx-vj57-vqqx
Package: openclaw (NPM)
Severity: MODERATE (CVSS 5.1)
CWE: CWE-288: Authentication Bypass Using an Alternate Path or Channel
Vulnerable versions: < 2026.3.23
Patched in: 2026.3.23

Summary: Duplicate Advisory: OpenClaw: Gateway Canvas local-direct requests bypass Canvas HTTP and WebSocket authentication

Details:
### Duplicate Advisory
This advisory has been withdrawn because it is a duplicate of GHSA-6mqc-jqh6-x8fc. This link is maintained to preserve external references.

### Original Description
OpenClaw before 2026.3.23 contains an authentication bypass vulnerability in the Canvas gateway where authorizeCanvasRequest() unconditionally allows local-direct requests without validating bearer tokens or canvas capabilities. Attackers can send unauthenticated loopback HTTP and WebSocket requests to Canvas routes to bypass authentication and gain unauthorized access.
GitHub Security Advisory: GHSA-hm63-vwj4-mj2q
Package: openclaw (NPM)
Severity: MODERATE (CVSS 5.3)
CWE: CWE-789: Memory Allocation with Excessive Size Value
Vulnerable versions: < 2026.3.22
Patched in: 2026.3.22

Summary: Duplicate Advisory: OpenClaw: Remote media error responses could trigger unbounded memory allocation before failure

Details:
### Duplicate Advisory
This advisory has been withdrawn because it is a duplicate of GHSA-4qwc-c7g9-4xcw. This link is maintained to preserve external references.

### Original Description
OpenClaw before 2026.3.22 contains an unbounded memory allocation vulnerability in remote media HTTP error handling that allows attackers to trigger excessive memory consumption. Attackers can send crafted HTTP error responses with large bodies to remote media endpoints, causing the application to allocate unbounded memory before failure handling occurs.
GitHub Security Advisory: GHSA-rhfg-j8jq-7v2h
Package: openclaw (NPM)
Severity: HIGH (CVSS 0.0)
CWE: CWE-918: Server-Side Request Forgery (SSRF)
Vulnerable versions: < 2026.3.28
Patched in: 2026.3.28

Summary: OpenClaw: SSRF via Unguarded Configured Base URLs in Multiple Channel Extensions (Incomplete Fix for CVE-2026-28476)

Details:
## Summary

SSRF via Unguarded Configured Base URLs in Multiple Channel Extensions (Incomplete Fix for CVE-2026-28476)

## Affected Packages / Versions

- Package: `openclaw`
- Affected versions: `<= 2026.3.24`
- First patched version: `2026.3.25`
- Latest published npm version at verification time: `2026.3.24`

## Details

Several channel extensions still used raw `fetch()` against configured base URLs without the SSRF guard that was added for CVE-2026-28476. Commit `f92c92515bd439a71bd03eb1bc969c1964f17acf` routes those outbound requests through `fetchWithSsrFGuard` so configured endpoints cannot be rebound to blocked internal destinations.

Verified vulnerable on tag `v2026.3.24` and fixed on `main` by commit `f92c92515bd439a71bd03eb1bc969c1964f17acf`.

## Fix Commit(s)

- `f92c92515bd439a71bd03eb1bc969c1964f17acf`
GitHub Security Advisory: GHSA-8j7f-g9gv-7jhc
Package: openclaw (NPM)
Severity: MODERATE (CVSS 7.4)
CWE: CWE-918: Server-Side Request Forgery (SSRF)
Vulnerable versions: < 2026.3.28
Patched in: 2026.3.28

Summary: Duplicate Advisory: OpenClaw: SSRF via Unguarded Configured Base URLs in Multiple Channel Extensions (Incomplete Fix for CVE-2026-28476)

Details:
### Duplicate Advisory
This advisory has been withdrawn because it is a duplicate of GHSA-rhfg-j8jq-7v2h. This link is maintained to preserve external references.

### Original Description
OpenClaw before 2026.3.25 contains a server-side request forgery vulnerability in multiple channel extensions that fail to properly guard configured base URLs against SSRF attacks. Attackers can exploit unprotected fetch() calls against configured endpoints to rebind requests to blocked internal destinations and access restricted resources.
GitHub Security Advisory: GHSA-2j53-2c28-g9v2
Package: openclaw (NPM)
Severity: MODERATE (CVSS 6.5)
CWE: CWE-696: Incorrect Behavior Order
Vulnerable versions: < 2026.3.22
Patched in: 2026.3.22

Summary: Duplicate Advisory: OpenClaw: Nostr inbound DMs could trigger unauthenticated crypto work before sender policy enforcement

Details:
### Duplicate Advisory
This advisory has been withdrawn because it is a duplicate of GHSA-65h8-27jh-q8wv. This link is maintained to preserve external references.

### Original Description
OpenClaw before 2026.3.22 performs cryptographic and dispatch operations on inbound Nostr direct messages before enforcing sender and pairing policy validation. Attackers can trigger unauthorized pre-authentication computation by sending crafted DM messages, enabling denial of service through resource exhaustion.
GitHub Security Advisory: GHSA-36cp-mh65-x882
Package: openclaw (NPM)
Severity: MODERATE (CVSS 5.3)
CWE: CWE-405: Asymmetric Resource Consumption (Amplification)
Vulnerable versions: < 2026.3.22
Patched in: 2026.3.22

Summary: Duplicate Advisory: OpenClaw is vulnerable to unauthenticated resource exhaustion through its voice call webhook handling

Details:
### Duplicate Advisory
This advisory has been withdrawn because it is a duplicate of GHSA-rm59-992w-x2mv. This link is maintained to preserve external references.

### Original Description
OpenClaw before 2026.3.22 contains an unauthenticated resource exhaustion vulnerability in voice call webhook handling that buffers request bodies before provider signature checks. Attackers can send large or malicious webhook requests to exhaust server resources without authentication by bypassing signature validation.
GitHub Security Advisory: GHSA-j56c-wpqm-h24x
Package: openclaw (NPM)
Severity: HIGH (CVSS 6.5)
CWE: CWE-294: Authentication Bypass by Capture-replay
Vulnerable versions: < 2026.3.23
Patched in: 2026.3.23

Summary: Duplicate Advisory: OpenClaw: Plivo V2 verified replay identity drifts on query-only variants

Details:
### Duplicate Advisory
This advisory has been withdrawn because it is a duplicate of GHSA-cg6c-q2hx-69h7. This link is maintained to preserve external references.

### Original Description
OpenClaw before 2026.3.23 contains a replay identity vulnerability in Plivo V2 signature verification that allows attackers to bypass replay protection by modifying query parameters. The verification path derives replay keys from the full URL including query strings instead of the canonicalized base URL, enabling attackers to mint new verified request keys through unsigned query-only changes to signed requests.
GitHub Security Advisory: GHSA-2h6j-mhcp-9j9h
Package: genieacs (NPM)
Severity: HIGH (CVSS 7.5)
CWE: CWE-284: Improper Access Control
Vulnerable versions: = 1.2.13
Patched in: unpatched

Summary: GenieACS has an unauthenticated access vulnerability via the NBI API endpoint

Details:
In GenieACS 1.2.13, an unauthenticated access vulnerability exists in the NBI API endpoint.
GitHub Security Advisory: GHSA-xrrh-p7f2-27vm
Package: 9router (NPM)
Severity: MODERATE (CVSS 7.3)
CWE: CWE-285: Improper Authorization
Vulnerable versions: < 0.3.75
Patched in: 0.3.75

Summary: decolua 9router vulnerable to authorization bypass

Details:
A security vulnerability has been detected in decolua 9router up to 0.3.47. The impacted element is an unknown function of the file /api of the component Administrative API Endpoint. The manipulation leads to authorization bypass. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used. Upgrading to version 0.3.75 is sufficient to resolve this issue. It is suggested to upgrade the affected component.
GitHub Security Advisory: GHSA-95hg-3c55-xf9x
Package: mcp-server-taskwarrior (NPM)
Severity: LOW (CVSS 5.3)
CWE: CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
Vulnerable versions: <= 1.0.1
Patched in: unpatched

Summary: awwaiid mcp-server-taskwarrior vulnerable to command injection

Details:
A security vulnerability has been detected in awwaiid mcp-server-taskwarrior up to 1.0.1. This impacts the function server.setRequestHandler of the file index.ts. Such manipulation of the argument Identifier leads to command injection. The attack must be carried out locally. The exploit has been disclosed publicly and may be used. The name of the patch is 1ee3d282debfa0a99afeb41d22c4b2fd5a3148f2. Applying a patch is advised to resolve this issue. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.
GitHub Security Advisory: GHSA-3xp3-pr8x-f755
Package: taskflow-ai (NPM)
Severity: MODERATE (CVSS 6.3)
CWE: CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection')
Vulnerable versions: < 2.1.9
Patched in: 2.1.9

Summary: Agions taskflow-ai vulnerable to os command injection in src/mcp/server/handlers.ts

Details:
A security flaw has been discovered in Agions taskflow-ai up to 2.1.8. This impacts an unknown function of the file src/mcp/server/handlers.ts of the component terminal_execute. Performing a manipulation results in os command injection. The attack is possible to be carried out remotely. Upgrading to version 2.1.9 will fix this issue. The patch is named c1550b445b9f24f38c4414e9a545f5f79f23a0fe. Upgrading the affected component is recommended. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.
GitHub Security Advisory: GHSA-crh9-3gjh-m6gc
Package: api-lab-mcp (NPM)
Severity: MODERATE (CVSS 7.3)
CWE: CWE-918: Server-Side Request Forgery (SSRF)
Vulnerable versions: <= 0.2.1
Patched in: unpatched

Summary: api-lab-mcp vulnerable to SSRF

Details:
A weakness has been identified in atototo api-lab-mcp up to 0.2.1. This affects the function analyze_api_spec/generate_test_scenarios/test_http_endpoint of the file src/mcp/http-server.ts of the component HTTP Interface. This manipulation of the argument source/url causes server-side request forgery. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.
GitHub Security Advisory: GHSA-3f6h-2hrp-w5wx
Package: @sveltejs/kit (NPM)
Severity: MODERATE (CVSS 0.0)
CWE: CWE-755: Improper Handling of Exceptional Conditions
Vulnerable versions: <= 2.57.0
Patched in: 2.57.1

Summary: @sveltejs/kit: Unvalidated redirect in handle hook causes Denial-of-Service

Details:
`redirect`, when called from inside the `handle` server hook with a location parameter containing characters that are invalid in a HTTP header, will cause an unhandled `TypeError`. This could result in DoS on some platforms, especially if the location passed to `redirect` contains unsanitized user input.
GitHub Security Advisory: GHSA-5jvj-hxmh-6h6j
Package: openclaw (NPM)
Severity: MODERATE (CVSS 0.0)
CWE: CWE-639: Authorization Bypass Through User-Controlled Key, CWE-863: Incorrect Authorization
Vulnerable versions: <= 2026.3.24
Patched in: 2026.3.25

Summary: OpenClaw: Gateway HTTP Session History Route Bypasses Operator Read Scope

Details:
## Summary

Gateway HTTP Session History Route Bypasses Operator Read Scope

## Affected Packages / Versions

- Package: `openclaw`
- Affected versions: `<= 2026.3.24`
- First patched version: `2026.3.25`
- Latest published npm version at verification time: `2026.3.24`

## Details

The HTTP `/sessions/:sessionKey/history` route previously authenticated bearer tokens but skipped the same `operator.read` check used by `chat.history` over WebSocket. Commit `1c[PII_REDACTED]6fa50f8cf8522ba5ff2fb2ca7aea` makes HTTP callers declare operator scopes and rejects history reads that do not include `operator.read`.

Verified vulnerable on tag `v2026.3.24` and fixed on `main` by commit `1c[PII_REDACTED]6fa50f8cf8522ba5ff2fb2ca7aea`.

## Fix Commit(s)

- `1c[PII_REDACTED]6fa50f8cf8522ba5ff2fb2ca7aea`
GitHub Security Advisory: GHSA-2crg-3p73-43xp
Package: @sveltejs/kit (NPM)
Severity: HIGH (CVSS 0.0)
CWE: CWE-770: Allocation of Resources Without Limits or Throttling
Vulnerable versions: <= 2.57.0
Patched in: 2.57.1

Summary: @sveltejs/adapter-node has a BODY_SIZE_LIMIT bypass

Details:
Under certain circumstances, requests could bypass the `BODY_SIZE_LIMIT` on SvelteKit applications running with `adapter-node`. This bypass does not affect body size limits at other layers of the application stack, so limits enforced in the WAF, gateway, or at the platform level are unaffected.
GitHub Security Advisory: GHSA-v457-wxvj-p9w9
Package: @vitejs/plugin-rsc (NPM)
Severity: HIGH (CVSS 7.5)
CWE: CWE-400: Uncontrolled Resource Consumption
Vulnerable versions: <= 0.5.22
Patched in: 0.5.23

Summary: @vitejs/plugin-rsc has a Denial of Service with React Server Components

Details:
### Impact

`@vitejs/plugin-rsc` vendors `react-server-dom-webpack`, which contained a vulnerability in versions prior to 19.2.4. See details in React repository's advisory https://github.com/facebook/react/security/advisories/GHSA-479c-33wc-g2pg

### Patches

Upgrade immediately to `@vitejs/plugin-rsc@0.5.23` or later.
GitHub Security Advisory: GHSA-q4gf-8mx6-v5v3
Package: next (NPM)
Severity: HIGH (CVSS 7.5)
CWE: CWE-770: Allocation of Resources Without Limits or Throttling
Vulnerable versions: >= 16.0.0-beta.0, < 16.2.3
Patched in: 16.2.3

Summary: Next.js has a Denial of Service with Server Components

Details:
A vulnerability affects certain React Server Components packages for versions 19.x and frameworks that use the affected packages, including Next.js 13.x, 14.x, 15.x, and 16.x using the App Router. The issue is tracked upstream as [CVE-2026-23869](https://github.com/facebook/react/security/advisories/GHSA-479c-33wc-g2pg). You can read more about this advisory our [this changelog](https://vercel.com/changelog/summary-of-cve-2026-23869).

A specially crafted HTTP request can be sent to any App Router Server Function endpoint that, when deserialized, may trigger excessive CPU usage. This can result in denial of service in unpatched environments.
GitHub Security Advisory: GHSA-q4gf-8mx6-v5v3
Package: next (NPM)
Severity: HIGH (CVSS 7.5)
CWE: CWE-770: Allocation of Resources Without Limits or Throttling
Vulnerable versions: >= 13.0.0, < 15.5.15
Patched in: 15.5.15

Summary: Next.js has a Denial of Service with Server Components

Details:
A vulnerability affects certain React Server Components packages for versions 19.x and frameworks that use the affected packages, including Next.js 13.x, 14.x, 15.x, and 16.x using the App Router. The issue is tracked upstream as [CVE-2026-23869](https://github.com/facebook/react/security/advisories/GHSA-479c-33wc-g2pg). You can read more about this advisory our [this changelog](https://vercel.com/changelog/summary-of-cve-2026-23869).

A specially crafted HTTP request can be sent to any App Router Server Function endpoint that, when deserialized, may trigger excessive CPU usage. This can result in denial of service in unpatched environments.
GitHub Security Advisory: GHSA-479c-33wc-g2pg
Package: react-server-dom-webpack (NPM)
Severity: HIGH (CVSS 7.5)
CWE: CWE-400: Uncontrolled Resource Consumption, CWE-502: Deserialization of Untrusted Data
Vulnerable versions: >= 19.2.0, < 19.2.5
Patched in: 19.2.5

Summary: React Server Components have a Denial of Service Vulnerability

Details:
## Impact

A denial of service vulnerability exists in React Server Components, affecting the following packages: react-server-dom-parcel, react-server-dom-turbopack, react-server-dom-webpack versions 19.0.0, 19.1.0 and 19.2.0. The vulnerability is triggered by sending specially crafted HTTP requests to Server Function endpoints.

The payload of the HTTP request causes excessive CPU usage for up to a minute ending in a thrown error that is catchable.

We recommend updating immediately.

The vulnerability exists in versions 19.0.0 through 19.0.4, 19.1.0 through 19.1.5, and 19.2.0 through 19.2.4 of:

[react-server-dom-webpack](https://www.npmjs.com/package/react-server-dom-webpack)
[react-server-dom-parcel](https://www.npmjs.com/package/react-server-dom-parcel)
[react-server-dom-turbopack](https://www.npmjs.com/package/react-server-dom-turbopack?activeTab=readme)

## Patches

Fixes were back ported to versions 19.0.5, 19.1.6, and 19.2.5.

If you are using any of the above packages please upgrade to any of the fixed versions immediately.

If your app’s React code does not use a server, your app is not affected by this vulnerability. If your app does not use a framework, bundler, or bundler plugin that supports React Server Components, your app is not affected by this vulnerability.

## References

See the [blog post](https://react.dev/blog/2025/12/11/denial-of-service-and-source-code-exposure-in-react-server-components) for more information and upgrade instructions.
GitHub Security Advisory: GHSA-479c-33wc-g2pg
Package: react-server-dom-webpack (NPM)
Severity: HIGH (CVSS 7.5)
CWE: CWE-400: Uncontrolled Resource Consumption, CWE-502: Deserialization of Untrusted Data
Vulnerable versions: >= 19.1.0, < 19.1.6
Patched in: 19.1.6

Summary: React Server Components have a Denial of Service Vulnerability

Details:
## Impact

A denial of service vulnerability exists in React Server Components, affecting the following packages: react-server-dom-parcel, react-server-dom-turbopack, react-server-dom-webpack versions 19.0.0, 19.1.0 and 19.2.0. The vulnerability is triggered by sending specially crafted HTTP requests to Server Function endpoints.

The payload of the HTTP request causes excessive CPU usage for up to a minute ending in a thrown error that is catchable.

We recommend updating immediately.

The vulnerability exists in versions 19.0.0 through 19.0.4, 19.1.0 through 19.1.5, and 19.2.0 through 19.2.4 of:

[react-server-dom-webpack](https://www.npmjs.com/package/react-server-dom-webpack)
[react-server-dom-parcel](https://www.npmjs.com/package/react-server-dom-parcel)
[react-server-dom-turbopack](https://www.npmjs.com/package/react-server-dom-turbopack?activeTab=readme)

## Patches

Fixes were back ported to versions 19.0.5, 19.1.6, and 19.2.5.

If you are using any of the above packages please upgrade to any of the fixed versions immediately.

If your app’s React code does not use a server, your app is not affected by this vulnerability. If your app does not use a framework, bundler, or bundler plugin that supports React Server Components, your app is not affected by this vulnerability.

## References

See the [blog post](https://react.dev/blog/2025/12/11/denial-of-service-and-source-code-exposure-in-react-server-components) for more information and upgrade instructions.
GitHub Security Advisory: GHSA-479c-33wc-g2pg
Package: react-server-dom-webpack (NPM)
Severity: HIGH (CVSS 7.5)
CWE: CWE-400: Uncontrolled Resource Consumption, CWE-502: Deserialization of Untrusted Data
Vulnerable versions: >= 19.0.0, < 19.0.5
Patched in: 19.0.5

Summary: React Server Components have a Denial of Service Vulnerability

Details:
## Impact

A denial of service vulnerability exists in React Server Components, affecting the following packages: react-server-dom-parcel, react-server-dom-turbopack, react-server-dom-webpack versions 19.0.0, 19.1.0 and 19.2.0. The vulnerability is triggered by sending specially crafted HTTP requests to Server Function endpoints.

The payload of the HTTP request causes excessive CPU usage for up to a minute ending in a thrown error that is catchable.

We recommend updating immediately.

The vulnerability exists in versions 19.0.0 through 19.0.4, 19.1.0 through 19.1.5, and 19.2.0 through 19.2.4 of:

[react-server-dom-webpack](https://www.npmjs.com/package/react-server-dom-webpack)
[react-server-dom-parcel](https://www.npmjs.com/package/react-server-dom-parcel)
[react-server-dom-turbopack](https://www.npmjs.com/package/react-server-dom-turbopack?activeTab=readme)

## Patches

Fixes were back ported to versions 19.0.5, 19.1.6, and 19.2.5.

If you are using any of the above packages please upgrade to any of the fixed versions immediately.

If your app’s React code does not use a server, your app is not affected by this vulnerability. If your app does not use a framework, bundler, or bundler plugin that supports React Server Components, your app is not affected by this vulnerability.

## References

See the [blog post](https://react.dev/blog/2025/12/11/denial-of-service-and-source-code-exposure-in-react-server-components) for more information and upgrade instructions.