GHSA-w85g-3h6x-4xh2: OpenClaw: Image pixel-limit guard can fail open on sips and allow decompression-bomb DoS

April 3, 2026

Image pixel-limit guard can fail open on sips and allow decompression-bomb DoS

References

github.com/advisories/GHSA-w85g-3h6x-4xh2
github.com/openclaw/openclaw
github.com/openclaw/openclaw/commit/0ed4f8a72bb140045962e97ab01c94c076b758a4
github.com/openclaw/openclaw/releases/tag/v2026.3.31
github.com/openclaw/openclaw/security/advisories/GHSA-w85g-3h6x-4xh2

Code Behaviors & Features

Detect and mitigate GHSA-w85g-3h6x-4xh2 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →