Threats affecting pkg:npm/wppconnect-server

WPPConnect Server versions up to 2.10.74 have a missing authentication vulnerability in the Chatwoot webhook route. This flaw allows unauthenticated attackers who know or guess a connected session name to send arbitrary WhatsApp messages or files from that account without proper verification.