Skip to content

zeptoclaw has Shell allowlist-blocklist bypass via command/argument injection and file name wildcards

Critical severity GitHub Reviewed Published Mar 4, 2026 in qhkm/zeptoclaw • Updated Mar 5, 2026

No open alerts for this advisory

Give feedback on Dependabot alerts