GHSA-55cf-xx38-4p9p: OpenClaw: Workspace dotenv files cannot override connector endpoint hosts

May 4, 2026

Workspace dotenv files cannot override connector endpoint hosts.

References

github.com/advisories/GHSA-55cf-xx38-4p9p
github.com/openclaw/openclaw/commit/0623079e98abf7202591f1b04a89755eb7ec9272
github.com/openclaw/openclaw/security/advisories/GHSA-55cf-xx38-4p9p

Code Behaviors & Features

Detect and mitigate GHSA-55cf-xx38-4p9p with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →