Server-side Request Forgery (SSRF)

Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the wait --fn function in browser wait predicates, which does not apply the same navigation checks enforced on other browser actions. An authenticated...