GHSA-4g5x-2jfc-xm98: OpenClaw: Tlon media downloads can bypass core safety limits and exhaust disk

April 7, 2026

Tlon media downloads can bypass core safety limits and exhaust disk

References

github.com/advisories/GHSA-4g5x-2jfc-xm98
github.com/openclaw/openclaw
github.com/openclaw/openclaw/commit/2194587d70d2aef863508b945319c5a7c88b12ce
github.com/openclaw/openclaw/security/advisories/GHSA-4g5x-2jfc-xm98

Code Behaviors & Features

Detect and mitigate GHSA-4g5x-2jfc-xm98 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →