GHSA-qcc3-jqwp-5vh2: OpenClaw: LINE webhook handler lacks shared pre-auth concurrency budget before signature verification

April 2, 2026

LINE webhook handler lacks shared pre-auth concurrency budget before signature verification

References

github.com/advisories/GHSA-qcc3-jqwp-5vh2
github.com/openclaw/openclaw
github.com/openclaw/openclaw/commit/57c47d8c7fbf5a2e70cc4dec2380977968903cad
github.com/openclaw/openclaw/releases/tag/v2026.3.31
github.com/openclaw/openclaw/security/advisories/GHSA-qcc3-jqwp-5vh2

Code Behaviors & Features

Detect and mitigate GHSA-qcc3-jqwp-5vh2 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →