GHSA-82qx-6vj7-p8m2: OpenClaw: Channel setup catalog lookups could include untrusted workspace plugin shadows

April 17, 2026

Channel setup catalog lookups could include untrusted workspace plugin shadows.

References

github.com/advisories/GHSA-82qx-6vj7-p8m2
github.com/openclaw/openclaw
github.com/openclaw/openclaw/commit/1fede43b948df40ca8674511d4bd08d39f6c5837
github.com/openclaw/openclaw/security/advisories/GHSA-82qx-6vj7-p8m2

Code Behaviors & Features

Detect and mitigate GHSA-82qx-6vj7-p8m2 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →