milesmcc Shynet

• CVE-2026-35508 Medium 5.4 Shynet before 0.14.0 allows XSS in urldisplay and iconify template filters, 0.2%
• CVE-2026-35507 Medium 6.4 Shynet before 0.14.0 allows Host header injection in the password reset flow. 0.1%