Skip to content
Every CVE
Browse
Docs
Sources
Guide
Search
/
Get
API key
Every CVE
Vendors
Qhkm
Zeptoclaw
Qhkm Zeptoclaw vulnerabilities
aisarlabs
zeptoclaw
ZeptoClaw: Path boundary checks bypass via symlink, TOCTOU, and hardlink
CVE-2026-32232
Fix available
8.8
High
March 12, 2026
qhkm
zeptoclaw
ZeptoClaw: Generic webhook channel trusts caller-supplied identity fields; allowlist is checked against untrusted payload data
CVE-2026-32231
Fix available
8.2
High
March 12, 2026
esc
Pages
All vulnerabilities
Browse
Docs
Sources
Guide
Get API key
Move
Enter
Open