@apostrophecms form

• CVE-2026-113667 Medium 5.3 ApostropheCMS: CAPTCHA response token not URL-encoded 0.4%
• CVE-2026-113656 Medium 5.3 ApostropheCMS: Unauthenticated unbounded multipart upload → disk-exhaustion DoS 0.5%