[openclaw] OpenClaw hardened cron webhook delivery against SSRF

**[openclaw] OpenClaw hardened cron webhook delivery against SSRF**

Affected Packages / Versions openclaw npm package versions <= 2026.2.17. Vulnerability Cron webhook delivery in src/gateway/server-cron.ts used fetch() directly, so webhook targets could reach private/metadata/internal endpoints without SSRF policy checks. Fix Commit(s) 99db4d13e 35851cdaf Thanks @Adam55A-code for reporting. References https://github.com/openclaw/openclaw/security/advisories/GHSA-w45g-5746-x9fp https://github.com/openclaw/openclaw/commit/99db4d13e5c139883ef0def9ff963e9273179655 https://github.com/openclaw/openclaw/releases/tag/v2026.2.19 https://github.com/advisories/GHSA-w45g-5746-x9fp

---

**[devsupporter 해설]**

이 기사는 GitHub Security Advisories에서 제공하는 최신 개발 동향입니다. 관련 도구나 기술에 대해 더 알아보시려면 원본 링크를 참고하세요.