Kahi has privilege-drop and socket/log permission issues in github.com/kahiteam/kahi
{ "url": "https://pkg.go.dev/vuln/GO-2026-5847", "review_status": "UNREVIEWED" }
"https://vuln.go.dev/ID/GO-2026-5847.json"