GHSA-55f6-4pr5-c7m5: Kahi has privilege-drop and socket/log permission issues

June 30, 2026

Kahi releases up to and including v0.1.0-alpha.8 contain three privilege/permission issues, all fixed in v0.1.0-alpha.9. They were identified in a full-codebase security review on 2026-05-26.

References

github.com/advisories/GHSA-55f6-4pr5-c7m5
github.com/kahiteam/kahi/security/advisories/GHSA-55f6-4pr5-c7m5

Code Behaviors & Features

Detect and mitigate GHSA-55f6-4pr5-c7m5 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →