GHSA-w2cg-vxx6-5xjg: OpenClaw: denial of service through large base64 media files allocating large buffers before limit checks

February 18, 2026

Base64-backed media inputs could be decoded into Buffers before enforcing decoded-size budgets. An attacker supplying oversized base64 payloads can force large allocations, causing memory pressure and denial of service.

References

github.com/advisories/GHSA-w2cg-vxx6-5xjg
github.com/openclaw/openclaw
github.com/openclaw/openclaw/commit/31791233d60495725fa012745dde8d6ee69e9595
github.com/openclaw/openclaw/releases/tag/v2026.2.14
github.com/openclaw/openclaw/security/advisories/GHSA-w2cg-vxx6-5xjg

Code Behaviors & Features

Detect and mitigate GHSA-w2cg-vxx6-5xjg with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →