Security – Page 5 – Njalla

BTC

—

—

ETH

—

—

SOL

—

—

BNB

—

—

GOLD

—

—

XRP

—

—

DOGE

—

—

ADA

—

—

Security 77 articles

[MEDIUM] Security Advisory: OpenClaw’s Nextcloud Talk webhook missing rate limiting on shared secret authentication (openclaw)

[CRITICAL] Security Advisory: OpenClaw’s incomplete host env sanitization blocklist allows supply-chain redirection via package-manager env overrides (openclaw)

[HIGH] Security Advisory: OpenClaw has a gateway exec allowlist allow-always bypass via unregistered /usr/bin/script wrapper (openclaw)

How we made Trail of Bits AI-native (so far)

Mar 31 · 3 min

axios Compromised on npm – Malicious Versions Drop Remote Access Trojan – StepSecurity

Mar 31 · 3 min

[HIGH] Security Advisory: OpenClaw: Gateway operator.write Can Reach Admin-Class Channel Allowlist Persistence via chat.send (openclaw)

Mar 31 · 3 min

[MEDIUM] Security Advisory: OpenClaw: Mutating internal `/allowlist` chat commands missed `operator.admin` scope enforcement (openclaw)

Mar 31 · 3 min

[HIGH] Security Advisory: OpenClaw: `browser.request` still allows `POST /reset-profile` through the `operator.write` surface (openclaw)

Mar 31 · 3 min

[MEDIUM] Security Advisory: OpenClaw: Non-owner command-authorized sender can change the owner-only `/send` session delivery policy (openclaw)

Mar 31 · 3 min

[HIGH] Security Advisory: Zebra has a Consensus Failure due to Improper Verification of V5 Transactions (zebrad, zebra-consensus)

Mar 31 · 3 min

[CRITICAL] Security Advisory: Telnyx has malicious code in PyPI versions 4.87.1 and 4.87.2 (telnyx)

Mar 31 · 3 min

[MEDIUM] Security Advisory: Fleet’s Apple MDM profile delivery has second-order SQL Injection that can compromise the database (github.com/fleetdm/fleet/v4)

Mar 31 · 3 min