@apostrophecms Passport-bridge vulnerabilities

• @apostrophecms passport-bridge, apostrophecms apostrophe +1 more ApostropheCMS: Cross-domain session token in URL confers session takeover CVE-2026-113669 Fix available 5.3 MediumOctober 20, 2026