Security – Page 2 – Njalla

BTC

—

—

ETH

—

—

SOL

—

—

BNB

—

—

GOLD

—

—

XRP

—

—

DOGE

—

—

ADA

—

—

Security 77 articles

[MEDIUM] Security Advisory: OpenClaw: Host exec environment overrides miss proxy, TLS, Docker, and Git TLS controls (openclaw)

[LOW] Security Advisory: OpenClaw: Telnyx Webhook Replay Detection Bypass via Base64 Signature Re-encoding (openclaw)

[HIGH] Security Advisory: OpenClaw: Device-Paired Node Skips Node Scope Gate → Host RCE.md (openclaw)

[MEDIUM] Security Advisory: OpenClaw: Feishu thread history and quoted messages bypass sender allowlist (openclaw)

[HIGH] Security Advisory: OpenClaw: Workspace `.env` can override the bundled hooks root and load attacker hook code (openclaw)

[MEDIUM] Security Advisory: OpenClaw: LINE webhook handler lacks shared pre-auth concurrency budget before signature verification (openclaw)

[LOW] Security Advisory: OpenClaw: MSTeams thread history bypasses sender allowlist via Graph API (openclaw)

[MEDIUM] Security Advisory: OpenClaw: SSH-based sandbox backends pass unsanitized process.env to child processes (openclaw)

[MEDIUM] Security Advisory: OpenClaw: SSRF via Unguarded `fetch()` in Marketplace Plugin Download and Ollama Model Discovery (openclaw)

[MEDIUM] Security Advisory: OpenClaw: SSH sandbox tar upload follows symlinks, enabling arbitrary file write on remote host (openclaw)

[LOW] Security Advisory: TeleJSON: DOM XSS via unsanitised constructor name in `new Function()` (telejson)

Tracking drones with the 5G tower down the street