@chrysb/alphaclaw (0.8.7) potentially affected by CVE-2026-40037 via openclaw (2026.4.5)

openclaw NPM version 2026.4.5 is affected by a known vulnerability. The following packages have a transitive dependency on openclaw and may be impacted: - @chrysb/alphaclaw 0.8.7 Source cves: CVE-2026-40037 Source advisory: SNYK:JS-OPENCLAW-15949297...