Yunai ruoyi-vue-pro

• CVE-2026-57950 High 8.1 ruoyi-vue-pro - Incorrect Permission Namespace in ErpSaleOrderController 0.4%
• CVE-2026-57949 Medium 6.5 ruoyi-vue-pro - Missing Authorization in CRM Follow-up Record GET Endpoint 0.3%