zeptoclaw
Rust / Cargo · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| ZeptoClaw: Email Sender Spoofing to bypass Header-Only From Allowlist Validation | zeptoclaw | Rust / Cargo | Medium | Fix reported | |
| ZeptoClaw: Path boundary checks bypass via symlink, TOCTOU, and hardlink | zeptoclaw | Rust / Cargo | High | Fix reported | |
| ZeptoClaw: Generic webhook channel trusts caller-supplied identity fields; allowlist is checked against untrusted payload data | zeptoclaw | Rust / Cargo | High | Fix reported | |
| zeptoclaw has Android device shell blocklist bypass via argument permutation | zeptoclaw | Rust / Cargo | High | Fix reported | |
| zeptoclaw has Shell allowlist-blocklist bypass via command/argument injection and file name wildcards | zeptoclaw | Rust / Cargo | Critical | Fix reported |