github.com/jmpsec/osctrl vulnerabilities (Go)

2 vulnerabilities.

• github.com/jmpsec/osctrl Go `osctrl-admin` has Stored Cross-Site Scripting (XSS) in On-Demand Query List CVE-2026-28280 Fix available 6.1 MediumFebruary 26, 2026
• github.com/jmpsec/osctrl Go `osctrl-admin` Vulnerable to OS Command Injection via Environment Configuration CVE-2026-28279 Fix available 7.4 HighFebruary 26, 2026