Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/04/07 6:14 p.m.9 views

OpenClaw: Zalo replay dedupe cache could suppress events across authenticated webhook targets

Summary Before OpenClaw 2026.3.31, the Zalo webhook replay-dedupe cache was shared across authenticated webhook targets and keyed too broadly. In multi-account deployments, a replay seen on one account could suppress a legitimate event on another account if eventname and messageid matched. Impact...

5.9AI score
SaveExploits0References4Affected Software1
Rows per page
Query Builder