ory kratos

• CVE-2026-33503 High 7.2 Ory Kratos has a SQL injection via forged pagination tokens 0.3%
• CVE-2024-45042 Medium 4.4 Ory Kratos's `highest_available` setting does not properly respect code + mfa credentials 0.3%