Kilo-Org kilocode

• CVE-2026-8766 Medium 4.3 Kilo-Org kilocode Environment Variable config.ts load information disclosure 0.3%
• CVE-2026-8765 Medium 4.3 Kilo-Org kilocode File Diff API Endpoint worktree-diff.ts Bun.file path traversal 0.6%