npm/@enderfga/claw-orchestrator CVE-2026-10291: medium 4.3, EPSS 0.35%
Claw Orchestrator has inefficient regular expression complexity via validateRegex()
Action: Upgrade @enderfga/claw-orchestrator to 3.7.1 or later.
npm i @enderfga/claw-orchestrator@3.7.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.7.1 | - |
Fixed versions
| 3.7.1 |
Sources
- osv: GHSA-95f6-rfpg-c3w8
- https://nvd.nist.gov/vuln/detail/CVE-2026-10291
- https://github.com/Enderfga/claw-orchestrator/issues/64
- https://github.com/Enderfga/claw-orchestrator/issues/64#issuecomment-4421942196
- https://github.com/Enderfga/claw-orchestrator/commit/3f970a974c65a94555c25af9f2796f11315e4584
- https://github.com/Enderfga/claw-orchestrator
- https://github.com/Enderfga/claw-orchestrator/releases/tag/v3.7.1
- https://vuldb.com/cve/CVE-2026-10291
- https://vuldb.com/submit/826222
- https://vuldb.com/vuln/367584
- https://vuldb.com/vuln/367584/cti
CVE-2026-10291 · published · modified · JSON