[GHSA-2j8v-hwgc-x698] OpenClaw: Shell wrapper argv could change between approval and execution - #9421
Conversation
|
Hi there @steipete! A community member has suggested an improvement to your security advisory. If approved, this change will affect the global advisory listed at github.com/advisories. It will not affect the version listed in your project repository. This change will be reviewed by our Security Curation Team. If you have thoughts or feedback, please share them in a comment here! If this PR has already been closed, you can start a new community contribution for this advisory |
There was a problem hiding this comment.
🟢 Approval recommended
The package metadata correction is complete, and no unresolved issues were identified.
Pull request overview
Corrects the affected npm package identifier in the OpenClaw security advisory.
Changes:
- Renames
Openclawto the canonical lowercaseopenclaw. - Updates the advisory modification timestamp.
File summaries
| File | Description |
|---|---|
advisories/github-reviewed/2026/07/GHSA-2j8v-hwgc-x698/GHSA-2j8v-hwgc-x698.json |
Corrects the affected-package metadata. |
Review details
- Files reviewed: 1/1 changed files
- Comments generated: 0
- Review effort level: Balanced
💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.
Updates
Comments
The NPM package name
Openclawdoes not exist. The correct name isopenclaw(npm), which points to openclaw/openclaw, the source of this advisory.