pravel Invoice Generator

• CVE-2026-12415 Critical 9.8 Invoice Generator <= 1.0.0 - Unauthenticated Privilege Escalation via Account Takeover via 'user_id' Parameter 0.8%
• CVE-2026-12416 Critical 9.8 Invoice Generator <= 1.0.0 - Unauthenticated Account Takeover via Weak Password Reset Validation via 'reset_user_id' Parameter 0.7%