0xdps emailflare

• CVE-2026-121730 Medium 6.5 emailflare before commit cf31f33 Missing Authorization via Inbox Compose Endpoint 0.2%
• CVE-2026-121729 High 8.3 emailflare before commit cf31f33 Missing Authorization via /api/keys Routes 0.2%