kasuganosoras Pigeon

• CVE-2026-32616 High 8.2 Pigeon has a Host Header Injection in email verification flow 0.2%
• CVE-2025-1447 Medium 4.3 kasuganosoras Pigeon index.php server-side request forgery 0.4%