openVESSL Anchorr

• CVE-2026-32891 Critical 9.1 Anchorr Privilege Escalation: Jellyseerr User → Anchorr Admin via Stored XSS 0.2%
• CVE-2026-32890 Critical 9.7 Anchorr: Stored XSS in User Mapping dropdown allows unprivileged Discord users to exfiltrate all secrets via /api/config 0.4%