GHSA-xq8g-hgh6-87hv: OpenClaw: BlueBubbles Webhook Missing Rate Limiting Enables Brute-Force Password Guessing

March 27, 2026

BlueBubbles Webhook Missing Guess Rate Limiting Enables Brute-Force Guessing of Weak Webhook Password

References

github.com/advisories/GHSA-xq8g-hgh6-87hv
github.com/openclaw/openclaw
github.com/openclaw/openclaw/commit/5e08ce36d522a1c96df2bfe88e39303ae2643d92
github.com/openclaw/openclaw/security/advisories/GHSA-xq8g-hgh6-87hv

Code Behaviors & Features

Detect and mitigate GHSA-xq8g-hgh6-87hv with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →