Staging Environment: Content and features may be unstable or change without notice.

Extra Mitigation Curation

gitlab/npm/clawdbot/CVE-2026-28478

Progress 0 / 0

Advisory Summary

gitlab/npm/clawdbot/CVE-2026-28478

OpenClaw affected by denial of service via unbounded webhook request body buffering Multiple webhook handlers accepted and buffered request bodies without a strict unified byte/time limit. A remote unauthenticated attacker could send oversized payloads and cause memory pressure, degrading availability.
Mitigation Type Mitigation Data Mitigation Note