GHSA-2w79-r9g8-wmcr: OpenClaw: Voice-call still parses large WebSocket frames before start validation (Incomplete fix for CVE-2026-32062)

April 3, 2026

Incomplete fix for CVE-2026-32062: voice-call still parses large WebSocket frames before start validation

References

github.com/advisories/GHSA-2w79-r9g8-wmcr
github.com/openclaw/openclaw
github.com/openclaw/openclaw/commit/9abcfdadf591bf266d85fbdfe14ae833e557a110
github.com/openclaw/openclaw/releases/tag/v2026.3.31
github.com/openclaw/openclaw/security/advisories/GHSA-2w79-r9g8-wmcr

Code Behaviors & Features

Detect and mitigate GHSA-2w79-r9g8-wmcr with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →