MEDIUM5.9npm
GHSA-3m3q-x3gj-f79x· CVE-2026-28465OpenClaw optional voice-call plugin: webhook verification may be bypassed behind certain proxy configurations
Modified: 3/9/2026
package
npm/@openclaw/voice-call
pkg:npm/%40openclaw/voice-call
HIGH7.5npm
GHSA-mfg5-7q5g-f37j· CVE-2026-32062OpenClaw voice-call media stream validated streams after upgrade, which could allow pre-start unauthenticated sockets to increase resource pressure
Modified: 9/10/2026