CRITICALnpm
GHSA-r5h9-vjqc-hq3r· CVE-2026-28474Nextcloud Talk allowlist bypass via actor.name display name spoofing
Modified: 3/5/2026
package
npm/@openclaw/nextcloud-talk
pkg:npm/%40openclaw/nextcloud-talk
package
pkg:npm/%40openclaw/nextcloud-talk
Nextcloud Talk allowlist bypass via actor.name display name spoofing
Modified: 3/5/2026