wppconnect wppconnect-server

• CVE-2026-123197 Medium 5.3 WPPConnect Server through 2.10.76 Unauthenticated Sticker Media Disclosure via /files 0.4%
• CVE-2026-121557 Medium 5.9 WPPConnect Server through 2.10.74 Missing Authentication via /api/:session/chatwoot 0.4%