JawherKl node-api-postgres

• CVE-2026-4191 High 7.3 JawherKl node-api-postgres Profile Picture index.js path.extname unrestricted upload 0.4%
• CVE-2026-4190 High 7.3 JawherKl node-api-postgres user.js User.getAll sql injection 0.3%