FlintSH Flare

• CVE-2026-30942 High 8.3 Flare has a Path Traversal in /api/avatars/[filename] 0.7%
• CVE-2026-30231 Medium 6.0 Flare: Private File IDOR via raw/direct endpoints 0.3%
• CVE-2026-30230 High 8.2 Flare: Password‑Protected Thumbnail Bypass 0.4%
• CVE-2026-26993 Medium 4.6 Flare has XSS vulnerability in Raw File Preview 0.3%