oss-apps SplitPro

• CVE-2026-122324 Low 3.1 SplitPro through 2.1.6 Authorization Bypass via expense.getExpenseDetails 0.2%
• CVE-2026-122317 Medium 4.3 SplitPro through 2.1.6 Authorization Bypass via user.getUserDetails tRPC Query 0.2%