oss-sec mailing list archives
Re: Wasm OCI Image Fetcher Bearer Realm SSRF Bypass
From: Solar Designer <solar () openwall com>
Date: Sat, 4 Jul 2026 05:48:40 +0200
On Fri, Jul 03, 2026 at 08:35:57PM -0700, h wrote:
From email headers on at least the first and last emails, and probably the others:X-Mailer: OpenClaw disclosure senderI think it's safe to say that this is certainly an LLM, given that.
Thanks. What does presence of this header guarantee in terms of lack of human review? May it be set on messages that passed human review? If not, it's tempting to block messages with that header from even reaching the moderators. I guess this also explains why messages are sent from a made-up address. CC'ing another address for xylove21 now, maybe a real one. I also forwarded my previous reply to there. Alexander
Current thread:
- Wasm OCI Image Fetcher Bearer Realm SSRF Bypass xylove21 (Jul 03)
- Re: Wasm OCI Image Fetcher Bearer Realm SSRF Bypass Solar Designer (Jul 03)
- Re: Wasm OCI Image Fetcher Bearer Realm SSRF Bypass h (Jul 03)
- Re: Wasm OCI Image Fetcher Bearer Realm SSRF Bypass Solar Designer (Jul 03)
- Re: Wasm OCI Image Fetcher Bearer Realm SSRF Bypass Eli Schwartz (Jul 05)
- Re: Wasm OCI Image Fetcher Bearer Realm SSRF Bypass yan xu (Jul 07)
- Re: Wasm OCI Image Fetcher Bearer Realm SSRF Bypass Solar Designer (Jul 07)
- Re: Wasm OCI Image Fetcher Bearer Realm SSRF Bypass h (Jul 03)
- Re: Wasm OCI Image Fetcher Bearer Realm SSRF Bypass Solar Designer (Jul 03)
