Cross-site Request Forgery (CSRF) Affecting @gitlawb/openclaude package, versions <0.5.1

@gitlawb/openclaude is an OpenClaude opens coding-agent workflows to any LLM — OpenAI, Gemini, DeepSeek, Ollama, and 200+ models

Affected versions of this package are vulnerable to Cross-site Request Forgery (CSRF) through the callback process. An attacker can cause the local server to shut down and terminate active authentication sessions by sending a crafted request containing an error parameter, which bypasses internal state validation. This can be triggered remotely via a cross-origin request without authentication or knowledge of the expected state value.

import { createServer } from 'http';
import { parse } from 'url';

const expectedState = "secure_state_abc123";

const server = createServer((req, res) => {
    const parsedUrl = parse(req.url || '', true);
    const { pathname, query } = parsedUrl;
    const { state, error } = query;

    if (pathname === '/callback') {

        // Vulnerable: error param causes state check to be skipped entirely
        if (!error && state !== expectedState) {
            res.writeHead(400);
            res.end('State mismatch');
            console.log('[-] CSRF attempt blocked.');
            return;
        }

        if (error) {
            res.writeHead(200);
            res.end(`Error: ${error}`);
            console.log(`[!] Server shutting down. Triggered by: ${error}`);
            server.close();
            return;
        }
    }
});

server.listen(12345, '127.0.0.1', () => {
    console.log('Listening on http://127.0.0.1:12345');
});

• GitHub Advisory
• GitHub Commit
• GitHub Release