Approved changes feed: RSS · Atom
cpe:2.3:a:nextlevelbuilder:goclaw:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Nextlevelbuilder (b77c3db5-6aa1-5b86-a1f9-ebbdf06ed302) |
|---|---|
| Product | Goclaw (cfb6376c-0684-581f-9df9-1805bf7a744e) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-18038 |
vulnerable | 2026-09-16 04:34:01.619851 |
nextlevelbuilder GoClaw jq Handler tools_invoke.go ExecTool.Execute information disclosure
MEDIUM (4.3)
A flaw has been found in nextlevelbuilder GoClaw up to 3.13.2. Affected by this vulnerability is the function ExecTool.Execute of the file goclaw/internal/http/tools_invoke.go of the component jq Handler. Executing a manipulation can lead to information disclosure. The attack can be launched remotely. The exploit has been published and may be used. This patch is called 1230. It is advisable to implement a patch to correct this issue.
Published: 2026-07-28T12:45:11.475Z
Updated: 2026-07-28T19:24:43.169Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-16199 |
vulnerable | 2026-07-29 00:26:18.564110 |
nextlevelbuilder GoClaw credentialed_exec.go ExecTool.Execute improper authorization
MEDIUM (6.3)
A flaw has been found in nextlevelbuilder GoClaw up to 3.13.3-beta.3. This affects the function ExecTool.Execute of the file goclaw/internal/tools/credentialed_exec.go. Executing a manipulation can lead to improper authorization. The attack may be launched remotely. The exploit has been published and may be used.
Published: 2026-07-19T00:00:12.753Z
Updated: 2026-07-20T19:10:18.336Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-16124 |
vulnerable | 2026-07-29 00:26:18.534358 |
nextlevelbuilder GoClaw web_fetch web_shared.go isPrivateIP server-side request forgery
MEDIUM (6.3)
A security vulnerability has been detected in nextlevelbuilder GoClaw up to 3.15.0-beta.32. This affects the function CheckSSRF/isPrivateIP of the file internal/tools/web_shared.go of the component web_fetch. Such manipulation leads to server-side request forgery. The attack can be launched remotely. The exploit has been disclosed publicly and may be used. Upgrading to version 3.15.0-beta.33 is able to mitigate this issue. The name of the patch is 12a0168271827650ddb0026d6277fbadf3dcf3ea. Upgrading the affected component is recommended.
Published: 2026-07-18T15:00:11.635Z
Updated: 2026-07-20T16:55:09.350Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-16123 |
vulnerable | 2026-07-29 00:26:18.534077 |
nextlevelbuilder GoClaw Invoke Endpoint tools_invoke.go ToolsInvokeHandler.ServeHTTP authorization
MEDIUM (6.3)
A weakness has been identified in nextlevelbuilder GoClaw up to 3.13.2. Affected by this issue is the function ToolsInvokeHandler.ServeHTTP of the file internal/http/tools_invoke.go of the component Invoke Endpoint. This manipulation causes missing authorization. The attack can be initiated remotely. The exploit has been made available to the public and could be used for attacks.
Published: 2026-07-18T14:45:08.338Z
Updated: 2026-07-22T15:33:42.676Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-16122 |
vulnerable | 2026-07-29 00:26:18.533872 |
nextlevelbuilder GoClaw exec_approval.go matchesAllowlist authorization
MEDIUM (4.3)
A security flaw has been discovered in nextlevelbuilder GoClaw up to 3.13.2. Affected by this vulnerability is the function extractBin/RequestApproval/matchesAllowlist of the file internal/tools/exec_approval.go. The manipulation results in incorrect authorization. The exploit has been released to the public and may be used for attacks.
Published: 2026-07-18T14:30:09.020Z
Updated: 2026-07-20T13:37:14.400Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-16121 |
vulnerable | 2026-07-29 00:26:18.533633 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-16120 |
vulnerable | 2026-07-29 00:26:18.533389 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-16119 |
vulnerable | 2026-07-29 00:26:18.532997 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-15627 |
vulnerable | 2026-07-29 00:26:18.320187 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-15626 |
vulnerable | 2026-07-29 00:26:18.319948 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-15625 |
vulnerable | 2026-07-29 00:26:18.319814 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-15624 |
vulnerable | 2026-07-29 00:26:18.319468 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-14716 |
vulnerable | 2026-07-29 00:26:17.492597 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-7505 |
vulnerable | 2026-06-08 08:08:57.313507 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-10617 |
vulnerable | 2026-06-08 07:47:13.833461 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-10616 |
vulnerable | 2026-06-08 07:47:13.833303 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-10583 |
vulnerable | 2026-06-08 07:47:13.825229 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-10219 |
vulnerable | 2026-06-08 07:47:13.696141 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-10218 |
vulnerable | 2026-06-08 07:47:13.695885 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-10217 |
vulnerable | 2026-06-08 07:47:13.695576 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.