gitlab/npm/clawdbot/CVE-2026-28478
OpenClaw affected by denial of service via unbounded webhook request body buffering
Multiple webhook handlers accepted and buffered request bodies without a strict unified byte/time limit. A remote unauthenticated attacker could send oversized payloads and cause memory pressure, degrading availability.