@apostrophecms uploadfs

• CVE-2026-113652 Medium 5.6 ApostropheCMS uploadfs Azure backend leaks account-level SAS token into every public attachment URL (sas: true) 0.3%
• CVE-2026-113651 Low 3.3 ApostropheCMS: Path traversal in uploadfs 0.3%