{"action":"Upgrade zeptoclaw to 0.7.6 or later.","affected":[{"fixed":"0.7.6","introduced":"0"}],"component":"zeptoclaw","cve_ids":[],"ecosystem":"crates.io","exploited":false,"fixed_versions":["0.7.6"],"ghsa_id":"GHSA-4cm8-xpfv-jv6f","id":"tcs_01M5KESJEK046THSFSWJXVK93K","modified_at":"2026-03-14T04:46:16.686765Z","published_at":"2026-03-12T16:38:22Z","references":["https://osv.dev/vulnerability/GHSA-4cm8-xpfv-jv6f","https://github.com/qhkm/zeptoclaw/security/advisories/GHSA-4cm8-xpfv-jv6f","https://github.com/qhkm/zeptoclaw","https://github.com/qhkm/zeptoclaw/releases/tag/v0.7.6"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-4cm8-xpfv-jv6f","url":"https://osv.dev/vulnerability/GHSA-4cm8-xpfv-jv6f"}],"summary":"ZeptoClaw: Email Sender Spoofing to bypass Header-Only From Allowlist Validation"}