Repository navigation
Security: netclaw-dev/netclaw
Security
No security policy detected
This project has not set up a SECURITY.md file yet.
Report a vulnerability-
Local daemon address becomes unknown after a configuration read failureGHSA-4638-4hj7-4w4m published
Oct 29, 2026 by AarononthewebLow -
Paired remote device can read provider OAuth tokens through the loopback check in tunnel exposure modesGHSA-fmjr-hw4g-337j published
Oct 26, 2026 by AarononthewebLow -
Tool approval override keys containing a colon set the whole tool to AutoGHSA-85pr-m799-g776 published
Oct 26, 2026 by AarononthewebLow -
TUI commands write every keystroke, including typed secrets, to a readable file in the system temp directoryGHSA-mh95-h6p6-c9j3 published
Oct 26, 2026 by AarononthewebLow -
Tunnel exposure modes lock out daemon-host pairing, pushing operators to reopen the SEC-005 loopback bypassGHSA-vmg4-5vwq-73vv published
Oct 26, 2026 by AarononthewebLow
Learn more about advisories related to netclaw-dev/netclaw in the GitHub Advisory Database