Security Thursdays by yisusvii — 2026-10-15

Table of Contents

🚨 Cybersecurity News of the Week

1. PraisonAI — unsandboxed CodeAgent, AICoder RCE, AgentOS open defaults (Oct 8)

What happened: On October 8, 2026, PraisonAI published a multi-advisory cluster. Highest severity:

• GHSA-2xv2-w8cq-5gxw / CVE-2026-61447 — Critical, CVSS 3.1 10.0 (AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H). PyPI praisonaiagents ≤ 1.6.77, fixed 1.6.78. CodeAgent._execute_python() runs LLM-generated Python in a subprocess with os.environ.copy(), no AST validation, no import restrictions, and no sandbox enforcement even when CodeConfig(sandbox=True) is set. Prompt injection (agent input, tool results, ingested content) can exfiltrate env secrets and run host code.
• GHSA-9mp3-24cc-77mg / CVE-2026-61445 — Critical, CVSS 3.1 9.9. PyPI praisonai ≤ 4.6.77, fixed 4.6.78. AICoder exposes write_to_file / execute_command to the model without path or command sanitization (arbitrary FS write and command execution; containers often root amplify impact).
• GHSA-cv3g-hj65-pcfh / CVE-2026-61434 — High 8.8 — shell allowlist bypass via find -exec after earlier chaining fixes; same 4.6.78 floor.
• GHSA-6wjp-v33h-5cvq / CVE-2026-61426 — High 8.6 — npm praisonai AgentOS defaults: bind 0.0.0.0, no API key, CORS * with credentials; unauthenticated GET /api/agents (prompt/instruction leak) and POST /api/chat. Fixed ≥ 1.7.3.

Additional same-day items cover plugin auto-discovery, SkillTools path escape, DNS-rebinding SSRF in crawl helpers, Host-header auth bypass on “localhost-only” Call API, and unauthenticated Jobs/MCP surfaces — treat 4.6.78 / 1.6.78 / npm 1.7.3 as the practical floors and read the full advisory set if you run any PraisonAI component.

Who is affected: Teams running PraisonAI agent UIs, CodeAgent, AICoder, or AgentOS from the version bands above (common in internal “AI ops” sandboxes that sometimes land on shared networks).

Why it matters: Same pattern as last week’s Langflow/Flowise story: agent platforms default to “notebook power, production listen socket.” Env-copy + fake sandbox is a secrets-breach class, not a niche code-exec demo.

Exploitation status: Not confirmed as mass in-the-wild exploitation in sources reviewed. Severity and prerequisites are from vendor GHSAs.

Defender actions: Upgrade packages to the floors above. Do not expose AgentOS without an API key and network policy. Strip secrets from agent host env; run non-root; disable CodeAgent/AICoder tool sinks you do not need.

Primary sources: linked GHSAs.

2. Handlebars AST injection bypasses 4.7.9 validator (Oct 8)

What happened: On October 8, 2026, GHSA-8r5x-fm3f-whwj / CVE-2026-106446 (Critical, CVSS 3.1 9.8) documented that Handlebars.compile() / precompile() still accept a pre-parsed AST, and the 4.7.9 validator only type-checks certain node kinds. Other AST fields are written raw into generated JavaScript. Untrusted objects (for example a JSON body passed where a template string was assumed) can inject JS that runs on render (server) or when precompiled output loads. This bypasses the AST validation added for earlier advisories (GHSA-2w6w-674q-4c4q and related). Fixed in v4.7.10; affected npm handlebars ≥ 4.0.0, ≤ 4.7.9. A companion critical, GHSA-p8wg-vrv2-v86f / CVE-2026-106445 (own-property check bypass), is part of the same hardening story — use 4.7.10+.

Who is affected: Apps that pass non-string values into compile/precompile. String-only template pipelines are called out as not affected for CVE-2026-106446.

Why it matters: Handlebars is still ubiquitous in Node SSR, email/HTML rendering, and admin UIs. “We upgraded past the last AST bug” is insufficient if you still accept object templates from clients.

Exploitation status: Not confirmed mass exploitation in sources reviewed.

Defender actions: Upgrade to ≥ 4.7.10. Enforce typeof template === 'string' at API boundaries. Prefer not accepting client-supplied ASTs at all.

Primary sources: GHSA-8r5x-fm3f-whwj, v4.7.10.

3. fast-jwt — incomplete RSA→HS256 fix and verifier gaps (Oct 8)

What happened: On October 8, 2026, nearform fast-jwt published a cluster fixed in v6.3.0:

• GHSA-ww5h-9m49-7xx4 / CVE-2026-107722 — Critical 9.8. The CVE-2026-34950 patch in 6.2.0 only trim()s whitespace before PEM detection. Any non-whitespace leading byte still skips the PEM regex and falls through to HMAC verification using the RSA public key material as the HMAC secret — re-enabling classic algorithm confusion. Affected ≥ 6.2.0, ≤ 6.2.4; fixed 6.3.0. Original incomplete fix train began with 6.2.0 (earlier disclosure); this week’s material change is the bypass + complete fix.
• GHSA-5hjw-83fp-phq9 / CVE-2026-107723 — High 8.1 — claim validators silently skipped when payload is a JSON array.
• Related Highs the same day: raw public JWK JSON treated as HMAC secret (CVE-2026-107724), unsigned JWT acceptance edge cases (CVE-2026-107720).

Who is affected: Node services verifying JWTs with fast-jwt ≤ 6.2.4, especially asymmetric-key verifiers that load PEM/JWK from configs that may carry prefixes/wrappers.

Why it matters: Incomplete crypto patches are worse than no patch when teams mark tickets “done” at 6.2.x. Algorithm confusion needs one successful forge path.

Exploitation status: Not confirmed in the wild in sources reviewed. Advisory includes a verified PoC against 6.2.2 (lab evidence, not campaign evidence).

Defender actions: Upgrade to ≥ 6.3.0. Pin algorithms explicitly; never mix “detect key type from blob” with attacker-influenced key material. Re-test negative cases (HS256 token against RSA verifier must fail).

Primary sources: linked GHSAs; v6.3.0.

4. Argo CD — SSH repository proxy → repo-server command injection (Oct 9)

What happened: On October 9, 2026, GHSA-j6cw-g6p4-7hch / CVE-2026-55797 (High, CVSS 3.1 8.8, EPSS on GHSA 1.548% / percentile ~0.75) disclosed that Argo CD builds an SSH ProxyCommand from repository proxy host/port and runs it via a shell. Shell metacharacters in the proxy host break out into the repo-server. Introduced with SOCKS5 SSH proxy support in v2.11.0 (commit 9b27aeb1a4 / PR #15864, 2024-01-09). Affects SSH repositories with proxy set (http/https/socks5 proxy URLs on SSH repos). HTTPS Git + HTTP proxy does not use this path.

Patches (per advisory): v3.6.0-rc2, v3.5.4, v3.4.10, v3.3.15. Fix stops passing proxy host/port through a shell. Argo CD 2.x and 3.0–3.2 are out of support and will not receive a patch — upgrade to patched 3.3+. GHSA package metadata lists github.com/argoproj/argo-cd/v2 ≥ 2.11.0, ≤ 2.14.21 with no first patched version.

Who is affected: Anyone who can create/update a repository or credential template (including project-scoped repo permission, argocd repo add --proxy, repository Secrets). Credential templates apply proxy to matching SSH repos.

Why it matters: GitOps control plane + credential store on the repo-server. Low privilege relative to cluster-admin still equals credential theft and supply-chain write potential.

Exploitation status: Not confirmed mass exploitation in sources reviewed.

Defender actions: Upgrade to a patched 3.3+ release. Remove unexpected proxy from repo/credential-template Secrets. Do not grant repository create/update to untrusted users. Prefer HTTPS repos where proxying is required until patched.

Primary sources: GHSA-j6cw-g6p4-7hch.

5. .NET / ASP.NET Core October servicing + edge/mail Criticals (Oct 13–14)

What happened:

• October 13, 2026 — Microsoft .NET wave (representative Criticals from GHSA / dotnet/announcements):

  • GHSA-5gjq-3f94-rcf7 / CVE-2026-105016 — Critical 9.8 — crafted IPv6 QUIC packet reaches Microsoft QUIC HTTP/3 path without auth or user interaction → RCE on Windows (.NET 8/9/10/11 RC2). Package note: Microsoft.Native.Quic.MsQuic.Schannel patched train 2.5.11-ci.159417053 (see advisory for full guidance). Install latest servicing updates; rebuild self-contained apps.
  • GHSA-rv87-ccxw-8ggf / CVE-2026-88092 — Critical 9.4 — aborted Kestrel HTTP/1 connection can reparse unread body bytes as another request (CWE-444 smuggling/desync). Floors include ASP.NET runtime 8.0.32, 9.0.21, 10.0.13, 11.0.0-rc.2.
  • GHSA-fpq8-4vhr-rcxx / CVE-2026-70188 — Critical 9.1 — Kestrel accepts newline characters in HTTP/2 trailers / HPACK dynamic table values instead of treating them as malformed (CWE-444). Same servicing floors.
  • Multiple additional High RCE/EoP/DoS advisories share the 8.0.32 / 9.0.21 / 10.0.13 trains (Blazor WASM server, Windows Desktop, cryptography XML/PKCS, SignalR, etc.). Treat the whole October .NET patch set as one change window.

• October 14, 2026 — network edge / mail:

  • GHSA-6rc3-jwq8-jm3v / CVE-2026-76519 — Critical 9.8 — Cisco Secure Email Gateway AMP/file reputation: crafted email attachment → arbitrary file write and command execution as root. Unauthenticated remote over email path when file reputation is enabled. Vendor: cisco-sa-esa-afw-zqYJkjxp. GHSA reference list includes a CISA KEV catalog deep link for this CVE; live KEV JSON was not downloadable here — verify KEV status and due dates directly in the CISA KEV catalog before closing the ticket.
  • GHSA-34c5-5qc5-99pf / CVE-2026-101954 — Critical 9.8 — Juniper Junos OS / Evolved J-Web + NETCONF session handling: unauthenticated attacker with reachable J-Web HTTP/HTTPS can obtain root-level configuration access. Vendor: JSA112187. Multiple additional Junos Criticals published the same day (rpd/httpd/TACACS/ZTP, etc.) — if you run Junos, pull the full October JSA bundle, not one CVE.
  • GHSA-ff5w-vvxc-fm9x / CVE-2026-97205 and GHSA-v72q-v4vf-2mx7 / CVE-2026-93479 — NGINX Plus / Open Source data-plane issues (SSI+AIO UAF; map/regex capture heap overflow). CVSS 3.1 8.1 Critical on GHSA. Code execution called out mainly when ASLR is disabled or bypassed; DoS/memory corruption more general. Fixed version matrix: consult F5 K000162608 (and the sibling K-article linked from CVE-2026-93479 NVD/GHSA). GHSA entries do not list npm/Go package floors.

Also notable (shorter form): TinaCMS admin preview iframe origin from URL fragment → editor-session GraphQL abuse (CVE-2026-108261, tinacms ≥ 3.14.0 / @tinacms/app ≥ 2.5.14); AsyncHttpClient host-replay credential leak (CVE-2026-107282, 2.16.1 / 3.0.13); Nginx-UI authenticated backup-restore RCE path (CVE-2026-107806, vendor points at v2.5.0 release tag — confirm your build against the advisory).

Exploitation status: Cisco item carries a KEV deep link on GHSA (verify live). No mass-exploitation confirmation reviewed for the OSS/.NET items above beyond vendor severity.

Defender actions: Patch .NET runtimes and rebuild SCD apps; schedule Cisco ESA and Junos J-Web emergency change windows; review NGINX SSI/AIO and map+capture configs against F5 guidance.

🛡️ CVEs That Deserve Attention

CVE-2026-61447 — PraisonAI CodeAgent unsandboxed execution

• Type: OS command/code execution + information disclosure (env secrets); sandbox bypass.
• Affected: PyPI praisonaiagents ≤ 1.6.77.
• Fixed: 1.6.78.
• CVSS 3.1: 10.0 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H).
• EPSS (GHSA field): percentage 0.0249, percentile 0.83568 (observation embedded in GHSA retrieval 2026-10-15).
• CISA KEV: Not independently confirmed (KEV JSON unreachable).
• Prerequisites: Ability to influence LLM-generated code (prompt injection / tool output). Advisory states sandbox flag does not enforce isolation; full os.environ copied into subprocess.
• Priority: Emergency for any networked or multi-tenant agent host; High for fully air-gapped single-user labs.
• Advisory: GHSA-2xv2-w8cq-5gxw.

CVE-2026-61445 — PraisonAI AICoder write/exec tools

• Type: Arbitrary file write + command execution via LLM tools.
• Affected: PyPI praisonai ≤ 4.6.77.
• Fixed: 4.6.78.
• CVSS 3.1: 9.9 (AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H).
• EPSS (GHSA): 0.00881 / percentile 0.57508.
• Priority: Emergency if AICoder UI is reachable beyond a single trusted operator.
• Advisory: GHSA-9mp3-24cc-77mg.

CVE-2026-106446 — Handlebars compile AST injection

• Type: JavaScript injection / RCE on render (CWE class: code generation from untrusted structure).
• Affected: npm handlebars ≥ 4.0.0, ≤ 4.7.9.
• Fixed: 4.7.10.
• CVSS 3.1: 9.8.
• EPSS (GHSA): 0.0064 / percentile 0.49055.
• Prerequisites: Application passes an untrusted object (not only a string) to compile/precompile.
• Priority: High if request bodies or CMS fields can be objects; Monitor if compile inputs are strictly server-side strings.
• Advisory: GHSA-8r5x-fm3f-whwj.

CVE-2026-107722 — fast-jwt incomplete algorithm-confusion fix

• Type: Authentication bypass via JWT algorithm confusion (RSA public key used as HMAC secret).
• Affected: npm fast-jwt ≥ 6.2.0, ≤ 6.2.4 (incomplete fix relative to CVE-2026-34950).
• Fixed: 6.3.0 (also covers companion verifier issues in the same release).
• CVSS 3.1: 9.8.
• EPSS (GHSA): 0.00272 / percentile 0.17959.
• Original disclosure context: CVE-2026-34950 addressed in 6.2.0; this week documents bypass via non-whitespace key prefix and ships 6.3.0.
• Prerequisites: Attacker knows victim RSA public key; verifier loads key material that may include a non-whitespace prefix; HS256 acceptance path reachable.
• Priority: Emergency for internet-facing API auth using fast-jwt asymmetric verify; High otherwise until 6.3.0+.
• Advisory: GHSA-ww5h-9m49-7xx4.

CVE-2026-55797 — Argo CD SSH proxy command injection

• Type: OS command injection in repo-server.
• Affected: Argo CD ≥ 2.11.0 (all supported lines until patched 3.3+ trains); ≤ 2.10.20 not affected per advisory.
• Fixed: 3.3.15, 3.4.10, 3.5.4, 3.6.0-rc2 (and later). No 2.x / 3.0–3.2 patches.
• CVSS 3.1: 8.8 (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).
• EPSS (GHSA): 0.01548 / percentile 0.74543.
• Prerequisites: Permission to set repository or credential-template proxy on an SSH repo; triggered on connection test and fetches.
• Priority: Emergency if untrusted users can add repos or proxies; High for locked-down admin-only Argo CD (still patch — credentials on repo-server).
• Advisory: GHSA-j6cw-g6p4-7hch.

CVE-2026-105016 — Microsoft QUIC / .NET HTTP/3 RCE (Windows)

• Type: Heap buffer overflow → RCE (CWE-122).
• Affected: .NET 8.0 / 9.0 / 10.0 / 11 RC2 on Windows using affected Microsoft QUIC path; see advisory package table for Microsoft.Native.Quic.MsQuic.Schannel.
• Fixed: Latest October servicing + MsQuic package 2.5.11-ci.159417053 per advisory; rebuild self-contained deployments.
• CVSS 3.1: 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
• EPSS (GHSA): 0.00986 / percentile 0.6161.
• Prerequisites: Network path to vulnerable QUIC/HTTP3 stack; no auth / no user interaction per vendor.
• Priority: Emergency for Windows internet-facing HTTP/3; High for internal Windows .NET services with QUIC enabled.
• Advisory: GHSA-5gjq-3f94-rcf7 · Announcement #446.

CVE-2026-76519 — Cisco Secure Email Gateway AMP file write

• Type: Improper attachment handling → arbitrary file write / root command execution.
• Affected: Cisco Secure Email Gateway with file reputation / AMP feature path (exact version matrix: vendor SA).
• Fixed: Consult cisco-sa-esa-afw-zqYJkjxp — do not guess release IDs.
• CVSS 3.1: 9.8.
• EPSS (GHSA): not populated on the GHSA record retrieved 2026-10-15.
• CISA KEV: GHSA references a KEV catalog query URL for this CVE. Independent catalog confirmation failed (feed unreachable). Verify in live CISA KEV before attesting compliance.
• Prerequisites: Unauthenticated remote attacker can send email with crafted attachment through affected device when file reputation service is enabled.
• Priority: Emergency.
• Advisory: GHSA-6rc3-jwq8-jm3v · Cisco SA.

🔧 Basic Security Tool of the Week

govulncheck (golang.org/x/vuln v1.9.0) — call-graph-aware Go vulnerability scanner

What it does: govulncheck analyzes Go modules and binaries against the Go vulnerability database. It aims to surface findings for vulnerabilities in functions your code actually reaches, reducing dependency-noise compared to version-only matching.

Who it is for: Go developers, platform/SRE teams maintaining Argo CD controllers, operators, repo-server sidecars, and any in-house GitOps/Kubernetes controllers — aligned with this week’s Argo CD and broader Go advisory volume (Nginx-UI, Vikunja, excelize, etc.).

Why this week: Different category from last week’s Syft (SBOM inventory) and earlier Grype / Trivy / Checkov / TruffleHog / OSV-Scanner / gosec. govulncheck answers “does my Go program call the vulnerable function?” Module golang.org/x/vuln v1.9.0 published 2026-10-11 (inside this research window) — active maintenance confirmed via the Go module proxy.

Install (authorized machine only):

# Pin the researched module version (prefer pin over floating @latest in CI)
go install golang.org/x/vuln/cmd/govulncheck@v1.9.0

# Confirm binary
govulncheck -h

Safe basic example — scan only modules and binaries you own or are authorized to assess:

# From an authorized Go module root
cd /path/to/your/authorized/module
govulncheck ./...

# Optional: JSON for CI artifacts on the same authorized tree
govulncheck -json ./... > govulncheck-report.json

# Optional: analyze an authorized binary you built (not third-party prod hosts)
govulncheck -mode=binary /path/to/your/authorized/app

How to read results: Treat “called” findings as patch-now candidates. Version-only / uncalled entries still matter for defense-in-depth and future refactors but can be prioritized lower. Map hits on github.com/argoproj/argo-cd/... and other GitOps deps to this week’s floors. Re-run after go get upgrades.

Limitations: Coverage is only as good as the Go vuln DB and build tags/GOOS/GOARCH you analyze. Vendored CGO, plugins, and runtime-generated code can be missed. Not a container image scanner (pair with Syft/Grype/Trivy if you need image SBOMs). Never point govulncheck at third-party systems, customer clusters, or binaries you are not authorized to inspect. Pin the tool version in CI.

Links: Module docs · govulncheck command · Tutorial · Go vuln DB · v1.9.0 module info

💡 Security Tip of the Day

Today’s tip: For every JWT verifier in production, forbid algorithm confusion by construction: pin one expected algorithm family, load keys already typed (PEM/JWK parsed with a strict parser — not “detect from blob”), and reject tokens whose header alg is not in an explicit allowlist — then prove a forged HS256 token against your RSA verifier fails.

Why it matters: This week’s fast-jwt advisory shows a “fixed” 6.2.x release still fell through to HMAC when PEM detection missed a non-whitespace prefix. Last month’s PyJWT work (see 2026-10-01 digest) is the same class. Library upgrades help; verifier policy is what keeps the class closed.

How to apply it (≈10 minutes):

1. Search code for createVerifier, jwt.verify, algorithms=, JWT_SECRET, PEM loaders.
2. Set an explicit algorithm allowlist (e.g. only RS256 or only ES256 or only HS256 — never “any”).
3. Upgrade fast-jwt to ≥ 6.3.0 (or your stack’s current complete fix).
4. Add a unit/integration test: build an HS256 token using the public RSA key bytes as HMAC secret; assert verification errors.
5. Ensure key config files cannot ship with comment wrappers or HTTP headers prepended to PEM.

Verify: Negative test fails closed; lockfile shows patched JWT library; staging auth rejects alg-mismatched tokens in logs without accepting them.

✅ Security Actions for This Week

1. Emergency: Patch PraisonAI (praisonai ≥ 4.6.78, praisonaiagents ≥ 1.6.78, npm ≥ 1.7.3); pull open AgentOS off untrusted networks; rotate secrets that ever lived in agent process env.
2. Emergency/High: fast-jwt ≥ 6.3.0 and handlebars ≥ 4.7.10 lockfile sweep; add alg-confusion negative tests (tip above).
3. Emergency/High: Upgrade Argo CD to patched 3.3.15 / 3.4.10 / 3.5.4 / 3.6.0-rc2+; audit SSH proxy on repos and credential templates; remove 2.x if still running.
4. Emergency: Apply .NET October servicing (8.0.32 / 9.0.21 / 10.0.13 …); prioritize Windows HTTP/3 / MsQuic (CVE-2026-105016) and Kestrel smuggling Criticals; rebuild self-contained apps. Process Cisco ESA SA for CVE-2026-76519 and verify CISA KEV due dates live.
5. Hygiene: Run govulncheck@v1.9.0 on one authorized Go service; finish any remaining items from the 2026-10-08 Payload/Langflow/Ghost floors.

Sources

• GHSA-2xv2-w8cq-5gxw — CVE-2026-61447 PraisonAI CodeAgent
• GHSA-9mp3-24cc-77mg — CVE-2026-61445 PraisonAI AICoder
• GHSA-cv3g-hj65-pcfh — CVE-2026-61434 PraisonAI find -exec allowlist bypass
• GHSA-6wjp-v33h-5cvq — CVE-2026-61426 PraisonAI AgentOS insecure defaults
• GHSA-8r5x-fm3f-whwj — CVE-2026-106446 Handlebars AST injection
• Handlebars v4.7.10 release
• GHSA-p8wg-vrv2-v86f — CVE-2026-106445 Handlebars own-property bypass
• GHSA-ww5h-9m49-7xx4 — CVE-2026-107722 fast-jwt incomplete alg-confusion fix
• GHSA-5hjw-83fp-phq9 — CVE-2026-107723 fast-jwt array payload claim bypass
• GHSA-g3jj-5cmm-3hxx — CVE-2026-107724 fast-jwt JWK-as-HMAC
• GHSA-8wpc-h4q6-8fxv — CVE-2026-107720 fast-jwt unsigned JWT edge
• fast-jwt v6.3.0 release
• GHSA-j6cw-g6p4-7hch — CVE-2026-55797 Argo CD SSH proxy command injection
• GHSA-5gjq-3f94-rcf7 — CVE-2026-105016 Microsoft QUIC RCE
• dotnet/announcements #446 — QUIC
• GHSA-rv87-ccxw-8ggf — CVE-2026-88092 Kestrel HTTP/1 reparse
• GHSA-fpq8-4vhr-rcxx — CVE-2026-70188 Kestrel HTTP/2 trailer newlines
• dotnet/announcements #472
• dotnet/announcements #462
• GHSA-6rc3-jwq8-jm3v — CVE-2026-76519 Cisco Secure Email Gateway AMP
• Cisco SA cisco-sa-esa-afw-zqYJkjxp
• GHSA-34c5-5qc5-99pf — CVE-2026-101954 Juniper J-Web improper authentication
• Juniper JSA112187
• GHSA-ff5w-vvxc-fm9x — CVE-2026-97205 NGINX SSI/AIO UAF
• GHSA-v72q-v4vf-2mx7 — CVE-2026-93479 NGINX map/regex heap overflow
• F5 K000162608
• GHSA-x34j-47hf-4xg7 — CVE-2026-108261 TinaCMS preview iframe
• TinaCMS tinacms@3.14.0
• GHSA-jmqq-x5g9-9p2w — CVE-2026-107282 AsyncHttpClient host replay
• GHSA-p393-cf76-4jmr — CVE-2026-107806 Nginx-UI backup restore RCE
• NVD — CVE-2026-61447
• NVD — CVE-2026-106446
• NVD — CVE-2026-107722
• NVD — CVE-2026-55797
• NVD — CVE-2026-105016
• NVD — CVE-2026-76519
• CISA Known Exploited Vulnerabilities Catalog
• govulncheck / golang.org/x/vuln
• govulncheck tutorial
• golang.org/x/vuln v1.9.0 module info
• GitHub Advisory Database