GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub
GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub
GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub
GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub