OpenClaw's Slack plugin approvals used the exec approver gate for plugin actions
npm openclaw · Upgrade to 2026.5.12 or later · < 2026.5.12 · CVE-2026-32906 · GHSA-wv26-j37q-2g7p · amended
Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
101–117 of 117 matching · newest first
npm openclaw · Upgrade to 2026.5.12 or later · < 2026.5.12 · CVE-2026-32906 · GHSA-wv26-j37q-2g7p · amended
npm openclaw · Upgrade to 2026.5.12 or later · < 2026.5.12 · CVE-2026-53825 · GHSA-p2fh-f5fc-44hr · amended
npm openclaw · Upgrade to 2026.5.18 or later · < 2026.5.18 · CVE-2026-35674 · GHSA-hw9r-h9mr-4jff · amended
npm openclaw · Upgrade to 2026.5.18 or later · < 2026.5.18 · CVE-2026-53831 · GHSA-mhq8-78pj-5j79 · amended
npm openclaw · Upgrade to 2026.5.18 or later · < 2026.5.18 · CVE-2026-35630 · GHSA-mgq6-vr84-7m2j · amended
npm openclaw · Upgrade to 2026.5.20 or later · < 2026.5.20 · CVE-2026-53814 · GHSA-6fvr-66p3-3qj4 · amended
npm openclaw · Upgrade to 2026.5.22 or later · < 2026.5.22 · CVE-2026-53817 · GHSA-chr9-m4q2-76hw · amended
npm openclaw · Upgrade to 2026.5.18 or later · < 2026.5.18 · CVE-2026-53832 · GHSA-rggc-m335-3wvj · amended
npm openclaw · Upgrade to 2026.5.18 or later · < 2026.5.18 · CVE-2026-53810 · GHSA-v6r2-jh58-xx6w · amended
npm openclaw · Upgrade to 2026.5.18 or later · < 2026.5.18 · CVE-2026-53812 · GHSA-2hfg-4fh4-qp7f · amended
npm openclaw · Upgrade to 2026.5.12 or later · < 2026.5.12 · CVE-2026-53820 · GHSA-qh2f-99mv-mrcf · amended
npm openclaw · Upgrade to 2026.5.18 or later · < 2026.5.18 · CVE-2026-53829 · GHSA-xww8-gqvh-92x9 · amended
npm openclaw · Upgrade to 2026.5.19 or later · <= 2026.5.19-beta.2 · CVE-2026-53815 · GHSA-q7q8-3mgw-q67r · amended
PyPI mcp-memory-service · Upgrade to 10.67.1 or later · < 10.67.1 · CVE-2026-50027 · GHSA-84hp-mqvj-3p8h · amended
Go github.com/gofiber/fiber/v3 · Upgrade to 3.3.0 or later · <= 3.2.0 · +1 more package · CVE-2026-45045 · GHSA-gcfq-8gqf-4876
Go github.com/gofiber/fiber/v3 · Upgrade to 3.3.0 or later · <= 3.2.0 · CVE-2026-44332 · GHSA-g5vh-55hw-rxm8
PyPI mlflow · Upgrade to 3.13.0rc0 (pre-release) or later · >= 2.14.0rc0, < 3.13.0rc0 · CVE-2026-8147 · GHSA-2cm6-r77w-6g96 · amended
A vendor fix does not resolve your finding until you verify it in your own systems.
Security reports that are not matched to your stack.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.