← Packages
picoclaw
Tiny, Fast, and Deployable anywhere — automate the mundane, unleash your creativity
- Current
- 0.2.3
- Candidate
- 0.3.1Stale
- License
- MIT
- BuildSystem
- ❔ custom
BuildDeps
Advisory · 2
Provider matches do not establish RPM applicability. Local patches, bundled dependencies and binary artifacts are not evaluated.
- Summary
- PicoClaw has an Injection issue in its Web Launcher Management Plane componentOSV
- Summary
- PicoClaw has an Injection issue in its Web Launcher Management Plane component in github.com/sipeed/picoclawOSV
- EPSS model date
- 2026-11-10FIRST
- EPSS probability
- 3.44%FIRST
- Returned advisory
- GHSA-6r3x-h84w-fhxxOSV
- Returned advisory
- GO-2026-5187OSV
- Aliases
- GHSA-6r3x-h84w-fhxx, GO-2026-5187OSV
- KEV
- NoCISA
- CVSS_V3
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:LOSV
- CVSS_V4
- CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:POSV
Description
PicoClaw is an ultra-lightweight personal AI Assistant inspired by NanoBot, refactored from the ground up in Go through a self-bootstrapping process, where the AI agent itself drove the entire architectural migration and code optimization.
Changelog
PR · 7
Checks
| Monitor | Observation | Last checked |
|---|---|---|
Stale Repository refresh: git fetch exited 128 (authentication) | ||
Stale Source last confirmed at 2026-11-11T02:02:14+00:00; repository refresh overdue. | ||
Checked | ||
Checked | ||
Not configured No reliable monitor identity/configuration. | — | |
Checked Compared same-provider, same-project SPDX metadata for this version pair. | ||
Checked | Last attempted | |
Checked Current source component only; local patches, build options, bundled dependencies and binary artifacts are not evaluated. | Last attempted | |
Checked |