@jhb.software payload-plugins

• CVE-2026-58200 High 7.1 @jhb.software/payload-cloudinary-plugin: Arbitrary Cloudinary API Parameter Signing 0.3%
• CVE-2026-59965 High 7.1 @jhb.software/payload-alt-text-plugin: Alt Text Endpoint Authorization Bypass via Payload Local API `overrideAccess` Omission 0.4%