Gitlawb openclaude

• CVE-2026-90712 Medium 4.3 Gitlawb openclaude xAI OAuth Callback xaiOAuthCallback.ts waitForCallback denial of service 0.6%
• CVE-2026-42073 Medium 6.5 OpenClaude's MCP OAuth Callback: State Check Bypass via error Param Leads to DoS 0.3%
• CVE-2026-42074 Critical 9.3 OpenClaude: Sandbox Bypass via Model-Controlled `dangerouslyDisableSandbox` Input 0.6%
• CVE-2026-35570 High 8.4 OpenClaude has Sandbox Bypass via Early-Exit Logic Flaw that Allows Path Traversal 0.2%