crater-invoice Crater

• CVE-2026-71242 High 8.2 Crater - Cross-Company IDOR on Notes via Missing Company-Ownership Check in NotePolicy 0.4%
• CVE-2026-55739 High 8.2 Crater - Missing Tenant-Ownership Check in CustomerPolicy Allows Cross-Company Customer Data Theft and Deletion 0.4%