zeptoclaw vulnerabilities (crates.io)
5 vulnerabilities.
-
zeptoclawcrates.io ZeptoClaw: Email Sender Spoofing to bypass Header-Only From Allowlist Validation 6.5 Medium -
zeptoclawcrates.io ZeptoClaw: Path boundary checks bypass via symlink, TOCTOU, and hardlink 8.8 High -
zeptoclawcrates.io ZeptoClaw: Generic webhook channel trusts caller-supplied identity fields; allowlist is checked against untrusted payload data 8.2 High -
zeptoclawcrates.io zeptoclaw has Shell allowlist-blocklist bypass via command/argument injection and file name wildcards 10.0 Critical -
zeptoclawcrates.io zeptoclaw has Android device shell blocklist bypass via argument permutation 7.5 High