Advisories for Npm/@Openclaw/Voice-Call package

In certain reverse-proxy / forwarding setups, webhook verification can be bypassed if untrusted forwarded headers are accepted.