CVE-2026-41362
1 advisory.
npm/openclaw CVE-2026-41362: low
OpenClaw: Zalo replay dedupe cache could suppress events across authenticated webhook targets
Action: Upgrade openclaw to 2026.3.31 or later.
npm i openclaw@2026.3.31Affected
| introduced | fixed | last affected |
|---|---|---|
| 2026.2.19 | 2026.3.31 | - |
Fixed versions
| 2026.3.31 |
Sources
- osv: GHSA-fqrj-m88p-qf3v
- https://github.com/openclaw/openclaw/security/advisories/GHSA-fqrj-m88p-qf3v
- https://github.com/openclaw/openclaw/commit/4d038bb242c11f39e45f6a4bde400e5fd42e4ebf
- https://github.com/openclaw/openclaw/commit/7cea7c29705b188b464cc9cdc107c275b94b2a72
- https://github.com/openclaw/openclaw
CVE-2026-41362 · published · modified · JSON