Advisory Database
  • Advisories
  • Dependency Scanning
  1. npm
  2. ›
  3. openclaw
  4. ›
  5. GHSA-rvqr-hrcc-j9vv

GHSA-rvqr-hrcc-j9vv: OpenClaw: Bonjour/DNS-SD TXT metadata steers CLI routing after failed service resolution

March 26, 2026

Bonjour and DNS-SD TXT metadata could still steer CLI routing even when actual service resolution failed, allowing unresolved hints to influence the chosen target.

References

  • github.com/advisories/GHSA-rvqr-hrcc-j9vv
  • github.com/openclaw/openclaw
  • github.com/openclaw/openclaw/commit/deecf68b59a9b7eea978e40fd3c2fe543087b569
  • github.com/openclaw/openclaw/security/advisories/GHSA-rvqr-hrcc-j9vv

Code Behaviors & Features

Detect and mitigate GHSA-rvqr-hrcc-j9vv with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →

Affected versions

All versions before 2026.3.22

Fixed versions

  • 2026.3.22

Solution

Upgrade to version 2026.3.22 or above.

Impact 7.1 HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L

Learn more about CVSS

Weakness

  • CWE-345: Insufficient Verification of Data Authenticity
  • CWE-642: External Control of Critical State Data

Source file

npm/openclaw/GHSA-rvqr-hrcc-j9vv.yml

Spotted a mistake? Edit the file on GitLab.

  • Site Repo
  • About GitLab
  • Terms
  • Privacy Statement
  • Contact

Page generated Sat, 09 May 2026 12:18:11 +0000.