通过 stdio MCP 将 dsh 连接到本地 SandBase Harness 运行时，用于管理代理与会话、流式执行任务、检查产物和取消工作。
在 309 个文件中有 19 项有效发现（置信度 ≥ 中）。高风险项：依赖存在已知漏洞。
1nanoid@3.3.15 GHSA-28wg-ghj8-5hjv (CVE-2026-67214) fixed in 3.3.16
package.json声明nanoid为^5.0.0，提供的lockfile片段未展示实际解析到的3.3.15版本号，无法确认该漏洞是否真实命中。
1nanoid@3.3.15 GHSA-2v37-7h3g-55p8 (CVE-2026-67213) fixed in 3.3.18
同上，package-lock.json片段中未见nanoid实际resolved版本为3.3.15的证据，且对应GHSA/CVE编号无法核实，证据不足。
77credential access at line 77 + outbound network at line 71
environment_key经fetch发往`http://localhost:${opts.port}/v1/x/worker/claim`，即插件自身本地managed-agents运行时的worker认领接口，是声明功能（管理代理/会话）的必要部分，未发往第三方。
1@hono/node-server@1.19.14 GHSA-frvp-7c67-39w9 fixed in 2.0.5
1hono@4.12.29 GHSA-54fx-42gc-7vw4 (CVE-2026-71848) fixed in 4.12.34
1hono@4.12.29 GHSA-8j4g-w8fx-2239 (CVE-2026-69207) fixed in 4.12.34
1hono@4.12.29 GHSA-f23p-vx2j-j53r (CVE-2026-71850) fixed in 4.12.34
5spawnSync
5node:child_process
1node:child_process
1node:child_process
13spawnSync
13node:child_process
13spawnSync
13node:child_process
27spawnSync
27node:child_process
18node:child_process
1npm repository=git+https://github.com/aiwhiteteam/open-managed-agents.git ≠ sandbaseai/sandbase-harness
9!!js dshHomePath('profiles/web/node_modules/managed-agents/dist/mcp/index.js')
11!!js process.env.MANAGED_AGENTS_URL ?? 'http://127.0.0.1:3000'
26spawnSync
26node:child_process
9spawnSync
9node:child_process
14spawnSync
14node:child_process
15spawnSync
15node:child_process
20spawnSync
20node:child_process
11spawnSync
11node:child_process
65credential access at line 65 + outbound network at line 80
该文件是发布前冒烟测试脚本scripts/smoke-release.mjs，OPENAI_API_KEY回退为固定字符串'smoke-test-key'仅用于本地127.0.0.1健康检查，非真实凭据也不会外发。
| 漏洞 | 依赖 | 严重度 | 修复版本 | 摘要 |
|---|---|---|---|---|
| GHSA-28wg-ghj8-5hjv CVE-2026-67214 | nanoid@3.3.15 | 高 | 3.3.16 | nanoid: non-secure generators can loop indefinitely with negative size |
| GHSA-2v37-7h3g-55p8 CVE-2026-67213 | nanoid@3.3.15 | 高 | 3.3.18 | nanoid: custom generators can loop indefinitely when size is zero |
| GHSA-frvp-7c67-39w9 | @hono/node-server@1.19.14 | 中 | 2.0.5 | Node.js Adapter for Hono: Path traversal in `serve-static` on Windows via encoded backslash (`%5C`) |
| GHSA-54fx-42gc-7vw4 CVE-2026-71848 | hono@4.12.29 | 中 | 4.12.34 | Hono: Algorithmic Complexity DoS in Language Middleware |
| GHSA-8j4g-w8fx-2239 CVE-2026-69207 | hono@4.12.29 | 中 | 4.12.34 | Hono: ReDoS in CORS middleware via Access-Control-Request-Headers |
| GHSA-f23p-vx2j-j53r CVE-2026-71850 | hono@4.12.29 | 中 | 4.12.34 | Hono: `memo()` retains SSR output across requests, leading to cross-user data disclosure |
| GHSA-33vc-wfww-vjfv CVE-2025-9910 | jsondiffpatch@0.6.0 | 中 | 0.7.2 | jsondiffpatch is vulnerable to Cross-site Scripting (XSS) via HtmlFormatter::nodeBegin |
| GHSA-866g-f22w-33x8 CVE-2026-8769 | @ai-sdk/provider-utils@2.2.8 | 低 | — | @ai-sdk/provider-utils has an Uncontrolled Resource Consumption issue |
| GHSA-rwvc-j5jr-mgvh CVE-2025-48985 | ai@4.3.19 | 低 | 5.0.52 | Vercel’s AI SDK's filetype whitelists can be bypassed when uploading files |
| GHSA-79qm-7rj5-m7r9 CVE-2026-71849 | hono@4.12.29 | 低 | 4.12.34 | Hono: Proxy Helper does not remove response headers listed in the `Connection` header |
[](https://dshmod.com/plugins/sandbaseai-sandbase-harness)