← All credits
Dikai Zou
12 vulnerability records and advisories credit this contributor.
CVE-2026-35674
OpenClaw < 2026.5.18 - Scope Bypass via Inherited chat.send Route
CVE-2026-35673
OpenClaw < 2026.4.29 - SSRF Policy Bypass via Browser Debug/Export Routes
CVE-2026-35630
OpenClaw < 2026.5.18 - QQBot Missing Approver Identity Enforcement in Native Approval Buttons
CVE-2026-34507
OpenClaw < 2026.4.29 - Policy Bypass in QQBot Admin Commands via DM-only and allowFrom Checks
CVE-2026-32905
OpenClaw < 2026.5.4 - Unauthorized Device-Pairing Bootstrap Code Issuance via Chat Command
CVE-2026-82879
DataEase before 2.10.26 Access Control Bypass via Share Tickets
CVE-2026-82878
DataEase before 2.10.26 Missing Object-Level Authorization on Geographic, Linkage and Chart Endpoints
CVE-2026-6678
Integer underflow in wc_PKCS7_DecryptOri handling crafted Other Recipient Info
CVE-2026-11703
Missing SNI/ALPN binding on stateful (session-ID) TLS session resumption
CVE-2026-6094
Heap buffer overread in wc_PKCS7_DecodeEnvelopedData parsing crafted PKCS7 EnvelopedData