cortezaproject corteza

• CVE-2026-108729 Medium 5.9 Corteza through 2024.9.10 Unauthenticated Attachment Access via Compose Attachment Endpoints 0.3%
• CVE-2026-6093 Medium 6.0 Corteza 2024.9.8 - SQL Injection in MSSQL JSON-path meta filter via incorrect T-SQL string escaping 0.3%