{"action":"Upgrade @openclaw/feishu to 2026.8.1 or later.","affected":[{"fixed":"2026.8.1","introduced":"0"}],"component":"@openclaw/feishu","cve_ids":["CVE-2026-100582"],"ecosystem":"npm","epss":0.00209,"exploited":false,"fixed_versions":["2026.8.1"],"ghsa_id":"GHSA-g7fw-3gjp-g5hf","id":"tcs_01M5KFQVN6P8GPT3K2C59VE3H0","modified_at":"2026-10-05T23:45:08.189423098Z","published_at":"2026-10-05T23:27:44Z","references":["https://osv.dev/vulnerability/GHSA-g7fw-3gjp-g5hf","https://github.com/openclaw/openclaw/security/advisories/GHSA-g7fw-3gjp-g5hf","https://github.com/openclaw/openclaw/pull/99905","https://github.com/openclaw/openclaw/commit/fbd330b7aa4a26726fa8468f0db2a23ada3843bd","https://github.com/openclaw/openclaw","https://github.com/openclaw/openclaw/releases/tag/v2026.8.1"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-g7fw-3gjp-g5hf#npm/@openclaw/feishu","url":"https://osv.dev/vulnerability/GHSA-g7fw-3gjp-g5hf"}],"summary":"OpenClaw: Channel read actions could skip target allowlists"}