fatfreecrm fat_free_crm

• CVE-2026-113600 Medium 5.4 Fat Free CRM before 0.26.0 IDOR via CommentsController update and destroy 0.3%
• CVE-2022-39281 Medium 6.5 Remote Denial of Service via Tasks endpoint in fat_free_crm 1.8%