kuaifan DooTask

• CVE-2026-111640 Medium 5.4 DooTask through 1.9.66 Missing Authorization in OKR Comment Dialogs 0.3%
• CVE-2025-10762 Medium 6.3 kuaifan DooTask UsersController.php sql injection 0.3%