Threats affecting pkg:github/cisagov/GRASSMARLIN

CVE-2026-6807 is a medium severity vulnerability in NSA's GRASSMARLIN version 3.2.1 and all other versions. It involves improper handling of XML input due to insufficient hardening of the XML parsing process, which can be triggered by crafted session data. This flaw may lead to unintended exposure of sensitive information. There is no known exploit in the wild and no official patch or remediation guidance has been provided yet.