Skip to content
OpenAdvisories

Package · npm

@enderfga/claw-orchestrator

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 4.3
    CVE-2026-10291

    Enderfga claw-orchestrator Session Grep Endpoint embedded-server.ts validateRegex redos

    A security vulnerability has been detected in Enderfga claw-orchestrator up to 3.7.0. The impacted element is the function validateRegex of the file claw-orchestrator/src/embedded-server.ts of the component Session Grep Endpoint. The manipulation of the argum…

    Enderfga claw-orchestrator @enderfga/claw-orchestrator npm
  • High 7.3
    CVE-2026-10281

    Enderfga claw-orchestrator API Endpoint embedded-server.ts EmbeddedServer missing authentication

    A weakness has been identified in Enderfga claw-orchestrator up to 3.5.5. This affects the function EmbeddedServer of the file src/embedded-server.ts of the component API Endpoint. This manipulation causes missing authentication. The attack may be initiated r…

    Enderfga claw-orchestrator @enderfga/claw-orchestrator npm