HIGH7.1Go
GHSA-3cjv-h753-qf7h· CVE-2026-45224, GO-2026-5079Crabbox contains a path traversal vulnerability in the Islo provider's workspace path resolution
Modified: 6/25/2026
package
Go/github.com/openclaw/crabbox
pkg:go/github.com/openclaw/crabbox
HIGH8.8Go
GHSA-4g9m-rffv-h6wq· CVE-2026-8621, GO-2026-5120Crabbox: authentication bypass vulnerability that allows impersonation of others by spoofing identity headers
Modified: 6/25/2026
CRITICAL9.1Go
GHSA-fm77-94qm-4894· CVE-2026-8634, GO-2026-5369Crabbox: environment variable exposure vulnerability
Modified: 7/21/2026
—Go
GO-2026-5079· CVE-2026-45224, GHSA-3cjv-h753-qf7hCrabbox contains a path traversal vulnerability in the Islo provider's workspace path resolution in github.com/openclaw/crabbox
Modified: 6/25/2026
—Go
GO-2026-5120· CVE-2026-8621, GHSA-4g9m-rffv-h6wqCrabbox: authentication bypass vulnerability that allows impersonation of others by spoofing identity headers in github.com/openclaw/crabbox
Modified: 6/25/2026
—Go
GO-2026-5369· CVE-2026-8634, GHSA-fm77-94qm-4894Crabbox: environment variable exposure vulnerability in github.com/openclaw/crabbox
Modified: 6/25/2026