{"action":"Upgrade microsandbox to 0.5.10 or later.","affected":[{"fixed":"0.5.10","introduced":"0"}],"component":"microsandbox","cve_ids":["CVE-2026-61670"],"ecosystem":"crates.io","epss":0.00163,"exploited":false,"fixed_versions":["0.5.10"],"ghsa_id":"GHSA-m8f5-rh7h-vgg3","id":"tcs_01M5KF1JB803DBFMV9R5RZYNVF","modified_at":"2026-09-22T20:00:05.178228242Z","published_at":"2026-09-22T19:43:04Z","references":["https://osv.dev/vulnerability/GHSA-m8f5-rh7h-vgg3","https://github.com/superradcompany/microsandbox/security/advisories/GHSA-m8f5-rh7h-vgg3","https://nvd.nist.gov/vuln/detail/CVE-2026-61670","https://github.com/superradcompany/microsandbox/issues/997","https://github.com/superradcompany/microsandbox/pull/1006","https://github.com/superradcompany/microsandbox/commit/2ac6a177b11212d392bf1e7dc77aaf14e4768aa8","https://github.com/superradcompany/microsandbox/commit/fbfb2366bfafad5e6df8778183f95fd8ca3c00a4","https://github.com/superradcompany/microsandbox","https://github.com/superradcompany/microsandbox/releases/tag/v0.5.10"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-m8f5-rh7h-vgg3","url":"https://osv.dev/vulnerability/GHSA-m8f5-rh7h-vgg3"}],"summary":"microsandbox: Secret values exposed in world-readable process arguments"}