maziggy bambuddy

• CVE-2026-53459 Critical 9.3 Bambuddy's authentication fails open on database errors, allowing unauthenticated access to all endpoints 0.8%
• CVE-2026-25505 Critical 9.8 Bambuddy Uses Hardcoded Secret Key + Many API Endpoints do not Require Authentication 0.8%