sso

• CVE-2026-49448 - authentik SourceStage empty POST bypass 2026-06-08
• CVE-2026-42354 - Sentry SAML SSO identity linking 2026-05-02