Kahi has privilege-drop and socket/log permission issues in github.com/kahiteam/kahi
{ "review_status": "UNREVIEWED", "url": "https://pkg.go.dev/vuln/GO-2026-5847" }
"https://vuln.go.dev/ID/GO-2026-5847.json"