morpheus65535 bazarr

• CVE-2026-61826 Critical 10.0 Bazarr: Plex OAuth API namespace is entirely unauthenticated, allowing config tampering, integration takeover and server-side request forgery 0.3%
• CVE-2023-50266 Medium 5.3 Bazarr Blind Server-Side Request Forgery (SSRF) in the /test/<protocol>/ endpoint 0.6%
• CVE-2023-50265 High 7.5 Bazarr Arbitrary file read in /api/swaggerui/static endpoint 0.9%
• CVE-2023-50264 High 7.5 Bazarr Arbitrary file read in /system/backup/download/ endpoint 0.9%