AWS loom

• CVE-2026-103958 High 7.6 Server-side request forgery in the tool server and remote agent connection handling in Loom for AWS 0.4%
• CVE-2026-103957 Medium 6.2 Server-side request forgery in the OAuth2 discovery handling in Loom for AWS 0.4%
• CVE-2026-103956 Critical 10.0 Missing authentication for critical function in Loom for AWS 2.5%