MEDIUM6.1Go
GHSA-4rv8-5cmm-2r22· CVE-2026-28280, GO-2026-4576osctrl has Stored Cross-Site Scripting (XSS) in On-Demand Query List
Modified: 3/23/2026
package
Go/github.com/jmpsec/osctrl
pkg:go/github.com/jmpsec/osctrl
HIGH7.3Go
GHSA-rchw-322g-f7rm· CVE-2026-28279, GO-2026-4579osctrl is Vulnerable to OS Command Injection via Environment Configuration
Modified: 3/23/2026
—Go
GO-2026-4576· CVE-2026-28280, GHSA-4rv8-5cmm-2r22osctrl has Stored Cross-Site Scripting (XSS) in On-Demand Query List in github.com/jmpsec/osctrl
Modified: 3/23/2026
—Go
GO-2026-4579· CVE-2026-28279, GHSA-rchw-322g-f7rmosctrl is Vulnerable to OS Command Injection via Environment Configuration in github.com/jmpsec/osctrl
Modified: 3/23/2026