samuelclay NewsBlur

• CVE-2026-56772 Medium 4.3 NewsBlur < 14.5.0 - Insecure Direct Object Reference in Social Interactions Endpoint 0.3%
• CVE-2026-56771 High 8.5 NewsBlur < 14.5.0 - Server-Side Request Forgery via add_url Endpoint 0.4%