go-shiori shiori

• CVE-2026-71280 High 8.5 go-shiori Server-Side Request Forgery via Unrestricted Bookmark URL Fetch 0.3%
• CVE-2026-71206 High 8.2 shiori - JWT CheckToken Never Re-Validates Account State, Allowing Stale-Privilege Access After Deletion or Demotion 0.4%
• CVE-2026-61463 High 8.8 Shiori Authenticated Privilege Escalation via PATCH /api/v1/auth/account 0.5%