azukaar Cosmos-Server

• CVE-2026-49446 Medium 6.1 Cosmos: Authentication bypass via forward-auth header smuggling on Constellation tunnel in Cosmos-Server 0.3%
• CVE-2026-49447 Medium 5.3 Cosmos-Server's constellation public-devices endpoint accepts arbitrary bearer tokens 0.4%
• CVE-2025-23214 Medium 6.9 Cosmos userbase checking vulnerability 0.7%
• CVE-2023-49091 High 8.8 Jwttoken in Cosmos server never expires after password changed and logging out 0.8%