Security – Page 6 – Njalla

BTC

—

—

ETH

—

—

SOL

—

—

BNB

—

—

GOLD

—

—

XRP

—

—

DOGE

—

—

ADA

—

—

Security 77 articles

[MEDIUM] Security Advisory: Fleet vulnerable to SQL Injection in MDM bootstrap package by authenticated team or global admin (github.com/fleetdm/fleet/v4)

Mar 31 · 4 min

[MEDIUM] Security Advisory: Fleet vulnerable to Denial of Service via unhandled gRPC log type in launcher endpoint (github.com/fleetdm/fleet/v4)

Mar 31 · 3 min

[MEDIUM] Security Advisory: Fleet’s user account creation via invite does not enforce invited email address (github.com/fleetdm/fleet/v4)

Mar 31 · 4 min

Breaking out: Can AI agents escape their sandboxes?

Mar 30 · 3 min

[HIGH] Security Advisory: OpenClaw: `session_status` sessionId resolution bypasses sandboxed session-tree visibility (openclaw)

Mar 30 · 3 min

[MEDIUM] Security Advisory: OpenClaw: Google Chat Authz Bypass via Group Policy Rebinding with Mutable Space displayName (openclaw)

Mar 30 · 3 min

[HIGH] Security Advisory: OpenClaw: SSRF via Unguarded Configured Base URLs in Multiple Channel Extensions (Incomplete Fix for CVE-2026-28476) (openclaw)

Mar 30 · 2 min

[MEDIUM] Security Advisory: OpenClaw: Feishu webhook reads and parses unauthenticated request bodies before signature validation (openclaw)

Mar 30 · 3 min

[MEDIUM] Security Advisory: OpenClaw: Feishu Raw Card Send Surface Can Mint Legacy Card Callbacks That Bypass DM Pairing (openclaw)

Mar 30 · 3 min

[HIGH] Security Advisory: OpenClaw: Gateway Plugin Subagent Fallback `deleteSession` Uses Synthetic `operator.admin` (openclaw)

Mar 30 · 3 min

[MEDIUM] Security Advisory: OpenClaw: MS Teams Feedback Invocation Bypasses Sender Allowlists and Records Unauthorized Session Feedback (openclaw)

Mar 29 · 4 min

[MEDIUM] Security Advisory: OpenClaw: Synology Chat Webhook Pre-Auth Rate-Limit Bypass Enables Brute-Force Guessing of Webhook Token (openclaw)

Mar 29 · 4 min