account-takeover

• CVE-2026-12415 - Invoice Generator unauthenticated account takeover 2026-06-27
• CVE-2026-53519 - Nezha dashboard path traversal leaks JWT secret 2026-06-27
• CVE-2026-41574 - Nhost OAuth email verification bypass 2026-05-02