gitlab/npm/clawdbot/GHSA-q447-rj3r-2cgh
OpenClaw affected by denial of service via unbounded webhook request body buffering
Multiple webhook handlers accepted and buffered request bodies without a strict unified byte/time limit. A remote unauthenticated attacker could send oversized payloads and cause memory pressure, degrading availability.