Vulnerability Database - OSV

GHSA-r5h9-vjqc-hq3r

npm/@openclaw/nextcloud-talk

Nextcloud Talk allowlist bypass via actor.name display name spoofing 17 Feb

Fix available
Severity - 9.3 (Critical)

CVE-2026-28474

github.com/openclaw/openclaw

OpenClaw Nextcloud Talk < 2026.2.6 - Allowlist Bypass via actor.name Display Name Spoofing 05 Mar

Fix available
Severity - 9.3 (Critical)