Oinone Pamirs

• CVE-2026-8736 Medium 4.1 Oinone Pamirs RestController LocalFileClient.java request.getParameter path traversal 0.2%
• CVE-2026-8735 Medium 6.3 Oinone Pamirs appConfigQuery PamirsParserConfig.java JsonUtils.parseMap deserialization 0.2%
• CVE-2026-8734 High 7.3 Oinone Pamirs queryListByWrapper RSQLToSQLNodeConnector.makeVariable sql injection 0.3%