webhook

• CVE-2026-48151 - Budibase webhook schema auth bypass 2026-06-13
• CVE-2026-39383 - Gotenberg webhook SSRF 2026-05-02
• GHSA-xh72/GHSA-xmxx - OpenClaw agent-surface fail-closed bypasses 2026-05-02