jleehr canto-saas-api

• CVE-2026-55374 Medium 4.8 canto-saas-api: Authenticated API requests can be redirected via unencoded path variables 0.4%
• CVE-2026-55375 Medium 5.3 canto-saas-api: OAuth credentials exposed in URL query string and exception messages 0.4%