CVE-2026-42073
1 advisory.
npm/@gitlawb/openclaude CVE-2026-42073: medium 6.5, EPSS 0.29%
OpenClaude MCP OAuth Callback: State Check Bypass via error Param Leads to DoS
Action: Upgrade @gitlawb/openclaude to 0.5.1 or later.
npm i @gitlawb/openclaude@0.5.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.5.1 | - |
Fixed versions
| 0.5.1 |
Sources
- osv: GHSA-c73c-x77g-854r
- https://github.com/Gitlawb/openclaude/security/advisories/GHSA-c73c-x77g-854r
- https://nvd.nist.gov/vuln/detail/CVE-2026-42073
- https://github.com/Gitlawb/openclaude/commit/739b8d1f40fde0e401a5cbd2b9a55d88bd5124ad
- https://github.com/Gitlawb/openclaude
- https://github.com/Gitlawb/openclaude/releases/tag/v0.5.1
CVE-2026-42073 · published · modified · JSON