Количество 3
Количество 3
CVE-2026-22178
OpenClaw versions prior to 2026.2.19 construct RegExp objects directly from unescaped Feishu mention metadata in the stripBotMention function, allowing regex injection and denial of service. Attackers can craft nested-quantifier patterns or metacharacters in mention metadata to trigger catastrophic backtracking, block message processing, or remove unintended content before model processing.
GHSA-c6hr-w26q-c636
OpenClaw has ReDoS and regex injection via unescaped Feishu mention metadata in RegExp construction
BDU:2026-05064
Уязвимость функции stripBotMention() ИИ-агента OpenClaw (ранее - ClawdBot или MoltBot), позволяющая нарушителю вызвать отказ в обслуживании
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-22178 OpenClaw versions prior to 2026.2.19 construct RegExp objects directly from unescaped Feishu mention metadata in the stripBotMention function, allowing regex injection and denial of service. Attackers can craft nested-quantifier patterns or metacharacters in mention metadata to trigger catastrophic backtracking, block message processing, or remove unintended content before model processing. | CVSS3: 6.5 | 0% Низкий | 5 месяцев назад |
| GHSA-c6hr-w26q-c636 OpenClaw has ReDoS and regex injection via unescaped Feishu mention metadata in RegExp construction | 0% Низкий | 5 месяцев назад | |
 | BDU:2026-05064 Уязвимость функции stripBotMention() ИИ-агента OpenClaw (ранее - ClawdBot или MoltBot), позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 8.2 | 0% Низкий | 6 месяцев назад |
Уязвимостей на страницу