gitlab/npm/clawdbot/CVE-2026-29612
OpenClaw: denial of service through large base64 media files allocating large buffers before limit checks
Base64-backed media inputs could be decoded into Buffers before enforcing decoded-size budgets. An attacker supplying oversized base64 payloads can force large allocations, causing memory pressure and denial of service.