aaif-goose goose

• CVE-2026-109561 Medium 4.2 goose from 1.28.0 before 1.44.0 Manual Approval Bypass via Read-Only Tool Annotations 0.2%
• CVE-2026-85623 High 8.8 goose 1.37.0 Arbitrary Command Execution via Recipe Extensions 0.6%
• CVE-2026-72718 High 7.0 goose: Arbitrary command execution in goose CLI via `goose review` via git core.fsmonitor 0.2%