token-leak

• CVE-2026-48039 - Meta Ads MCP HTTP tool auth bypass 2026-06-13
• CVE-2026-40903 - goshs ArtiPACKED GitHub Actions token leakage 2026-05-03