GoCVE-2026-39383 - Gotenberg webhook SSRFMay 2, 2026CVE-2026-40280 - Gotenberg SSRF deny-list bypassMay 2, 2026CVE-2026-40281 - Gotenberg ExifTool argument injectionMay 2, 2026CVE-2026-42560 - go-pkgz/auth Patreon identity collisionMay 2, 2026CVE-2026-39858 - Traefik forwarded alias auth bypassMay 2, 2026CVE-2026-41589 - Wish SCP path traversalMay 2, 2026CVE-2026-42461 - Arcane Compose template secret disclosureMay 2, 2026GHSA-74m3 - zrok WebDAV DriveRoot symlink escapeMay 2, 2026