sea-team GoFound

• CVE-2026-120444 High 8.1 GoFound through 1.4.1 Path Traversal via database parameter in /api/db/drop 0.4%
• CVE-2026-120443 Medium 6.1 GoFound through 1.4.1 Stored XSS via Admin Dashboard Search Results 0.3%