78 xiaozhi-esp32

• CVE-2026-13491 Low 3.7 78 xiaozhi-esp32 MQTT Goodbye mqtt_protocol.cc GetInstance denial of service 0.6%
• CVE-2026-13489 Low 3.1 78 xiaozhi-esp32 MCP Response mcp_server.cc ParseMessage improper synchronization 0.3%