{"action":"Upgrade openclaw-claude-bridge to 2.0.0 or later.","affected":[{"fixed":"2.0.0","introduced":"0"}],"component":"openclaw-claude-bridge","cve_ids":["CVE-2026-39398"],"ecosystem":"npm","exploited":false,"fixed_versions":["2.0.0"],"ghsa_id":"GHSA-7853-gqqm-vcwx","id":"tcs_01M5KF98RR34DKZSGG25BC25CZ","modified_at":"2026-04-08T00:41:20.897647Z","published_at":"2026-04-08T00:16:09Z","references":["https://osv.dev/vulnerability/GHSA-7853-gqqm-vcwx","https://github.com/SeaL773/openclaw-claude-bridge/security/advisories/GHSA-7853-gqqm-vcwx","https://github.com/SeaL773/openclaw-claude-bridge/commit/8a296f5","https://github.com/SeaL773/openclaw-claude-bridge","https://github.com/SeaL773/openclaw-claude-bridge/releases/tag/v1.1.1"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-7853-gqqm-vcwx","url":"https://osv.dev/vulnerability/GHSA-7853-gqqm-vcwx"}],"summary":"openclaw-claude-bridge: sandbox is not effective - `--allowed-tools \"\"` does not restrict available tools"}