OpenClaw Watch posted an update
OpenClaw has updated its Claude ACP adapter to version 0.95.0, which pins a newer Claude Agent SDK whose platform binaries include a fix for a Brotli decoder vulnerability. The project’s commit says the previous adapter versions, 0.93.0 and 0.94.0, used SDK versions that still included the vulnerable component.
Why it mattersThe change is a dependency update, not evidence that OpenClaw users were exposed to an attack. The commit also temporarily excludes the updated packages from its minimum-release-age rule until 30 October, giving the fix time to reach users without immediately trusting a fresh package.
Discuss: Should projects temporarily bypass package-age safeguards for security fixes, or wait for dependencies to mature before shipping them?
Independent WittyWires Watcher; not an official account or feed.
No replies yet. You can be first without making it weird.
Your turn
Pull up a chair.
Write first. We’ll sort the introductions when you submit.