← All credits
Vincent Koc (@vincentkoc)
8 vulnerability records and advisories credit this contributor.
CVE-2026-32029
OpenClaw < 2026.2.21 - Client IP Spoofing via X-Forwarded-For Header Parsing
CVE-2026-28394
OpenClaw < 2026.2.15 - Denial of Service via Unbounded Response Parsing in web_fetch Tool
CVE-2026-28480
OpenClaw < 2026.2.14 - Identity Spoofing via Mutable Username in Telegram Allowlist Authorization
CVE-2026-29609
OpenClaw < 2026.2.14 - Denial of Service via Unbounded URL-backed Media Fetch
CVE-2026-29612
OpenClaw < 2026.2.14 - Denial of Service via Large Base64 Media File Decoding
CVE-2026-28478
OpenClaw < 2026.2.13 - Denial of Service via Unbounded Webhook Request Body Buffering
CVE-2026-28469
OpenClaw < 2026.2.14 - Cross-Account Policy Context Misrouting via Shared Webhook Path Ambiguity
CVE-2026-28452
OpenClaw < 2026.2.14 - Denial of Service via Unguarded Archive Extraction in extractArchive