@gitlawb/openclaude vulnerabilities (npm)

2 vulnerabilities.

• @gitlawb/openclaude npm OpenClaude's MCP OAuth Callback: State Check Bypass via error Param Leads to DoS CVE-2026-42073 Fix available 6.5 MediumMay 12, 2026
• @gitlawb/openclaude npm OpenClaude has Sandbox Bypass via Early-Exit Logic Flaw that Allows Path Traversal CVE-2026-35570 Public exploitFix available 8.4 HighApril 20, 2026