DjangoCRM django-crm

• CVE-2026-90806 Medium 6.3 DjangoCRM django-crm Bulk Case Update bulk_views.py BulkUpdateCasesView authorization 0.4%
• CVE-2026-71240 Medium 4.3 DjangoCRM - Unauthenticated Open Redirect via toggle_default_sorting next_url Parameter 0.3%
• CVE-2026-71239 High 8.1 DjangoCRM - Server-Side Template Injection in Mass Mail Message Rendering 0.4%
• CVE-2026-71238 Critical 9.1 DjangoCRM - Hardcoded Django SECRET_KEY Enables Session and CSRF Token Forgery 0.4%