npm/@openclaw/feishu CVE-2026-100582: medium 6.5, EPSS 0.21%
OpenClaw: Channel read actions could skip target allowlists
Action: Upgrade @openclaw/feishu to 2026.8.1 or later.
npm i @openclaw/feishu@2026.8.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2026.8.1 | - |
Fixed versions
| 2026.8.1 |
Sources
- osv: GHSA-g7fw-3gjp-g5hf#npm/@openclaw/feishu
- https://github.com/openclaw/openclaw/security/advisories/GHSA-g7fw-3gjp-g5hf
- https://github.com/openclaw/openclaw/pull/99905
- https://github.com/openclaw/openclaw/commit/fbd330b7aa4a26726fa8468f0db2a23ada3843bd
- https://github.com/openclaw/openclaw
- https://github.com/openclaw/openclaw/releases/tag/v2026.8.1
CVE-2026-100582 · published · modified · JSON