multi-tenant

• CVE-2026-54329 - Snipe-IT cross-tenant accessory injection 2026-06-24
• GHSA-3xx2/GHSA-47wq - Paperclip agent key tenant-boundary bypass 2026-05-02
• CVE-2026-23902 — Apache DolphinScheduler authorization bypass 2026-04-26