Security incidents, vulnerabilities, and advisories
165 articles
openclaw/openclaw released version v2026.5.24-beta.1 (pre-release). This release includes breaking changes. Key updates: Gateway/perf: reuse process-stable channel catalog reads, avoid repeated bundled-channel boundary checks, and rotate gateway watch CPU profiles so benchmark runs do not accumul...
openclaw/openclaw released version v2026.5.22. This release includes breaking changes. Key updates: Gateway/perf: reuse process-stable channel catalog reads, avoid repeated bundled-channel boundary checks, and rotate gateway watch CPU profiles so benchmark runs do not accumulate unbounded artifac...
openclaw/openclaw released version v2026.5.22-beta.1 (pre-release). This release includes breaking changes. Key updates: Docs: clarify README onboarding and Gateway startup paths, WhatsApp QR/408 recovery, cron output language prompts, skill advanced features, gateway upstream 403 troubleshooting...
openclaw/openclaw released version v2026.5.16-beta.4 (pre-release). This release includes breaking changes. Key updates: Security/audit: add `security.audit.suppressions` for intentionally accepted audit findings, keeping suppressed matches out of the active summary while preserving them in JSON ...
openclaw/openclaw released version v2026.5.14-beta.2 (pre-release). This release includes breaking changes. Key updates: Channels/SDK: add normalized command turn facts to channel turn construction and expose command-turn helpers for plugin inbound contexts.; Agents/config: support per-agent boot...
openclaw/openclaw released version v2026.5.14-beta.1 (pre-release). This release includes breaking changes. Key updates: Dependencies: route root ambient Node proxy agents through `@openclaw/proxyline` and drop root `proxy-agent`, `https-proxy-agent`, and `minimatch` dependencies.; Control UI/i18...
openclaw/openclaw released version v2026.5.12. This release includes breaking changes. Key updates: Amazon Bedrock: externalize the Bedrock and Bedrock Mantle provider packages so core installs no longer pull AWS SDK dependencies unless those providers are installed.; Plugins: externalize Slack, ...
openclaw/openclaw released version v2026.5.12-beta.8 (pre-release). This release includes breaking changes. Key updates: Amazon Bedrock: externalize the Bedrock and Bedrock Mantle provider packages so core installs no longer pull AWS SDK dependencies unless those providers are installed.; Plugins...
openclaw/openclaw released version v2026.5.12-beta.7 (pre-release). This release includes breaking changes. Key updates: Amazon Bedrock: externalize the Bedrock and Bedrock Mantle provider packages so core installs no longer pull AWS SDK dependencies unless those providers are installed.; Plugins...
openclaw/openclaw released version v2026.5.12-beta.6 (pre-release). This release includes breaking changes. Key updates: Gateway/OpenAI HTTP: honor `max_completion_tokens` and `max_tokens` on inbound `/v1/chat/completions` requests so client-provided token caps reach the upstream provider via `st...
