GHSA-j6c7-3h5x-99g9: OpenClaw: Shell-wrapper detection missed env-argv assignment injection forms

April 17, 2026

Shell-wrapper detection missed env-argv assignment injection forms.

References

github.com/advisories/GHSA-j6c7-3h5x-99g9
github.com/openclaw/openclaw
github.com/openclaw/openclaw/commit/8f8492d172f4c5b4fd7dd9a47855ed620c8770ab
github.com/openclaw/openclaw/pull/65717
github.com/openclaw/openclaw/security/advisories/GHSA-j6c7-3h5x-99g9

Code Behaviors & Features

Detect and mitigate GHSA-j6c7-3h5x-99g9 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →