Threats tagged 'ghsa-p464-m8x6-vhv8'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	7.5	CVE-2026-41405OpenClaw: MS Teams webhook parses body before JWT validation, enabling unauthenticated resource exhaustion High7.52026-04-03GCVE DatabaseCVE-2026-41405 OpenClaw versions prior to 2026.3.31 have a vulnerability in the MS Teams webhook implementation where the webhook parses the JSON body before validating the JWT token. This flaw allows unauthenticated attackers to cause resource exhaustion by sending crafted requests. The issue is fixed in version 2026.3.31. Vulnerability CWE-400 #ghsa-p464-m8x6-vhv8 #npm	GCVE Database	2026-04-03

Page 1 of 1