Ecosystem	Package	Version

Vulnerabilities

sonatype-2026-000496

sonatype-2026-000496

openclaw - Authentication Bypass by Spoofing

Published Feb 19, 2026

https://github.com/advisories/GHSA-chm2-m3w2-wcxm

CVSS ScoreLow

2.1

Ecosystem	Package	Version


npm	clawdbot	2026.1.10
npm	clawdbot	2026.1.11-1
npm	clawdbot	2026.1.11-2
npm	clawdbot	2026.1.11-3
npm	clawdbot	2026.1.11-4
npm	clawdbot	2026.1.11
npm	clawdbot	2026.1.12-1
npm	clawdbot	2026.1.12-2
npm	clawdbot	2026.1.12
npm	clawdbot	2026.1.13
npm	clawdbot	2026.1.14-1
npm	clawdbot	2026.1.14
npm	clawdbot	2026.1.15
npm	clawdbot	2026.1.16-1
npm	clawdbot	2026.1.16-2
npm	clawdbot	2026.1.16
npm	clawdbot	2026.1.20-1
npm	clawdbot	2026.1.20-2
npm	clawdbot	2026.1.20
npm	clawdbot	2026.1.21-1
npm	clawdbot	2026.1.21-2
npm	clawdbot	2026.1.21
npm	clawdbot	2026.1.22
npm	clawdbot	2026.1.23-1
npm	clawdbot	2026.1.23
npm	clawdbot	2026.1.24-1
npm	clawdbot	2026.1.24-2
npm	clawdbot	2026.1.24-3
npm	clawdbot	2026.1.4-1
npm	clawdbot	2026.1.4
npm	clawdbot	2026.1.5-1
npm	clawdbot	2026.1.5-2
npm	clawdbot	2026.1.5-3
npm	clawdbot	2026.1.5
npm	clawdbot	2026.1.8-1
npm	clawdbot	2026.1.8-2
npm	clawdbot	2026.1.8
npm	clawdbot	2026.1.9
npm	openclaw	0.0.1
npm	openclaw	2026.1.29-beta.1
npm	openclaw	2026.1.29-beta.2
npm	openclaw	2026.1.29-beta.3
npm	openclaw	2026.1.29-beta.4
npm	openclaw	2026.1.29-beta.5
npm	openclaw	2026.1.29-beta.7
npm	openclaw	2026.1.29
npm	openclaw	2026.1.30
npm	openclaw	2026.2.12
npm	openclaw	2026.2.13
npm	openclaw	2026.2.1

sonatype-2026-000496 | Components Impacted | Sonatype Guide | Sonatype Guide