shellhub-io shellhub

• CVE-2026-44423 Medium 6.5 ShellHub: Cross-tenant IDOR in `GET /api/sessions/:uid` discloses SSH session data 0.2%
• CVE-2026-44424 Medium 6.5 ShellHub: Cross-tenant IDOR in `GET /api/devices/:uid` discloses device data of any namespace 0.2%
• CVE-2026-44426 Medium 6.5 ShellHub: Cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check 0.3%
• CVE-2026-44425 Medium 5.4 ShellHub: Crash-DoS via field injection in filter and sort-by parameters 0.3%