CVE-2026-61670

crates.io/microsandbox CVE-2026-61670: medium 6.5

microsandbox: Secret values exposed in world-readable process arguments

Action: Upgrade microsandbox to 0.5.10 or later.

cargo update -p microsandbox --precise 0.5.10

Affected

Fixed versions

Sources

• osv: GHSA-m8f5-rh7h-vgg3
• https://github.com/superradcompany/microsandbox/security/advisories/GHSA-m8f5-rh7h-vgg3
• https://nvd.nist.gov/vuln/detail/CVE-2026-61670
• https://github.com/superradcompany/microsandbox/issues/997
• https://github.com/superradcompany/microsandbox/pull/1006
• https://github.com/superradcompany/microsandbox/commit/2ac6a177b11212d392bf1e7dc77aaf14e4768aa8
• https://github.com/superradcompany/microsandbox/commit/fbfb2366bfafad5e6df8778183f95fd8ca3c00a4
• https://github.com/superradcompany/microsandbox
• https://github.com/superradcompany/microsandbox/releases/tag/v0.5.10

CVE-2026-61670 · published 2026-09-22T19:43:04Z · modified 2026-09-22T20:00:05.178228242Z · JSON