Vulnerabilities

TI-2026-61669 CVE-2026-90712 · GHSA-8g2q-59g2-qgcc

Gitlawb openclaude xAI OAuth Callback xaiOAuthCallback.ts waitForCallback denial of service

MEDIUM 57

A vulnerability was identified in Gitlawb openclaude up to 0.30.0.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00562 Published 2026-09-14 No fix listed CWE-404

TI-2026-30441 CVE-2026-42073 · GHSA-c73c-x77g-854r

MEDIUM 62

OpenClaude is an open-source coding-agent command line interface for cloud and local model providers.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00255 Published 2026-06-02 Fixed in 0.5.1 CWE-352

TI-2026-30442 CVE-2026-42074 · GHSA-m77w-p5jj-xmhg

HIGH 81

OpenClaude is an open-source coding-agent command line interface for cloud and local model providers.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00589 Published 2026-06-02 Fixed in 0.5.1 CWE-284

TI-2026-27674 CVE-2026-35570 · GHSA-m6rx-7pvw-2f73

HIGH 72

OpenClaude is an open-source coding-agent command line interface for cloud and local model providers.

CVSS 3.1HIGH 8.4 Local Low privileges No interaction EPSS 0.00232 Published 2026-04-20 Fixed in 0.5.1 CWE-22