CoopCycle coopcycle-web

• CVE-2026-121620 Medium 6.5 CoopCycle coopcycle-web 5.6.0 before 6.20.0 Missing Zelty Webhook Signature Verification 0.2%
• CVE-2026-121945 High 7.6 CoopCycle coopcycle-web before 6.20.1 IDOR via Incident Resource and Action Endpoint 0.4%