- Latest release
- 0.9.2 (Apr 7, 2026): no advisory affects it
- Newest unaffected release
- 0.9.2 (Apr 7, 2026), the latest release
- Advisories
- 2 · 2 high
- Weekly downloads
- 5
- Dependents
- 0
- Releases
- 26 since 0.3.0 (Feb 14, 2026)
- Registry
- crates.io
- Releases read
- Nov 8, 2026
Version timeline
- CVE-2026-32232Affects 0.3.0 to 0.7.5 (0.7.6 is outside it)
- CVE-2026-32231Affects 0.3.0 to 0.7.5 (0.7.6 is outside it)
Advisories 2
- CVE-2026-32232High 8.8
ZeptoClaw: Path boundary checks bypass via symlink, TOCTOU, and hardlink
Affected: fixed in 0.7.6.
Fixed in 0.7.6 (released Mar 11, 2026, 1 day before disclosure).
The latest release, 0.9.2, is not affected.
- CVE-2026-32231High 8.2
ZeptoClaw: Generic webhook channel trusts caller-supplied identity fields; allowlist is checked against untrusted payload data
Affected: fixed in 0.7.6.
Fixed in 0.7.6 (released Mar 11, 2026, 1 day before disclosure).
The latest release, 0.9.2, is not affected.