Find out if you have vulnerabilities that put you at risk
Test your applicationsAPPLICATION
OPERATING SYSTEM
- H
Command InjectionCVE-2026-28391
Affects openclaw | Versions <2026.2.2
Has fix
npmPublished 18 Feb 2026
- H
Command InjectionCVE-2026-28470
Affects openclaw | Versions <2026.2.2
Has fix
npmPublished 18 Feb 2026
- H
Improper Certificate ValidationCVE-2026-26327
Affects openclaw | Versions <2026.2.14
Has fix
npmPublished 18 Feb 2026
- H
Command InjectionCVE-2026-26323
Affects openclaw | Versions <2026.2.14
Has fix
npmPublished 18 Feb 2026
- H
Directory TraversalCVE-2026-28456
Affects openclaw | Versions <2026.2.14
Has fix
npmPublished 18 Feb 2026
- H
Directory TraversalCVE-2026-28482
Affects openclaw | Versions <2026.2.12
Has fix
npmPublished 18 Feb 2026
- H
Directory TraversalCVE-2026-26321
Affects @openclaw/feishu | Versions <2026.2.14
Has fix
npmPublished 18 Feb 2026
- H
Allocation of Resources Without Limits or ThrottlingCVE-2026-29612
Affects openclaw | Versions <2026.2.14
Has fix
npmPublished 18 Feb 2026
- C
Authentication Bypass Using an Alternate Path or ChannelCVE-2026-28454
Affects @openclaw/zalo | Versions <2026.2.13
Has fix
npmPublished 18 Feb 2026
- C
Authentication Bypass Using an Alternate Path or ChannelCVE-2026-28454
Affects @openclaw/voice-call | Versions <2026.2.13
Has fix
npmPublished 18 Feb 2026
- C
Authentication Bypass Using an Alternate Path or ChannelCVE-2026-28454
Affects @openclaw/nostr | Versions <2026.2.13
Has fix
npmPublished 18 Feb 2026
- C
Authentication Bypass Using an Alternate Path or ChannelCVE-2026-28454
Affects @openclaw/nextcloud-talk | Versions <2026.2.13
Has fix
npmPublished 18 Feb 2026
- C
Authentication Bypass Using an Alternate Path or ChannelCVE-2026-28454
Affects @openclaw/msteams | Versions <2026.2.13
Has fix
npmPublished 18 Feb 2026
- C
Authentication Bypass Using an Alternate Path or ChannelCVE-2026-28454
Affects @openclaw/feishu | Versions <2026.2.13
Has fix
npmPublished 18 Feb 2026
- C
Authentication Bypass Using an Alternate Path or ChannelCVE-2026-28454
Affects @openclaw/bluebubbles | Versions <2026.2.13
Has fix
npmPublished 18 Feb 2026
- C
Authentication Bypass Using an Alternate Path or ChannelCVE-2026-28454
Affects openclaw | Versions <2026.2.1
Has fix
npmPublished 18 Feb 2026
- H
Allocation of Resources Without Limits or ThrottlingCVE-2026-28478
Affects openclaw | Versions <2026.2.14
Has fix
npmPublished 18 Feb 2026
- H
Reliance on Untrusted Inputs in a Security DecisionCVE-2026-29610
Affects openclaw | Versions <2026.2.14
Has fix
npmPublished 18 Feb 2026
- H
Server-side Request Forgery (SSRF)CVE-2026-26322
Affects openclaw | Versions <2026.2.14
Has fix
npmPublished 18 Feb 2026
- H
Server-side Request Forgery (SSRF)CVE-2026-26324
Affects openclaw | Versions <2026.2.14
Has fix
npmPublished 18 Feb 2026
- M
Command InjectionCVE-2026-28463
Affects openclaw | Versions <2026.2.14
Has fix
npmPublished 18 Feb 2026
- C
Missing Authentication for Critical FunctionCVE-2026-28472
Affects openclaw | Versions <2026.2.2
Has fix
npmPublished 18 Feb 2026
- H
Directory TraversalCVE-2026-28447
Affects openclaw | Versions >=2026.1.29-beta.1 <2026.2.1
Has fix
npmPublished 18 Feb 2026
- H
Improper AuthenticationCVE-2026-28446
Affects @openclaw/voice-call | Versions <2026.2.2
Has fix
npmPublished 18 Feb 2026
- H
Improper Following of Specification by CallerCVE-2025-69287
Affects @bsv/sdk | Versions <2.0.0
Has fix
npmPublished 18 Feb 2026
- H
XML Entity ExpansionCVE-2026-26278
Affects fast-xml-parser | Versions >=4.1.3 <4.5.4>=5.0.0 <5.3.6
Has fix
npmPublished 18 Feb 2026