Apostrophecms Uploadfs vulnerabilities

• apostrophecms apostrophe, uploadfs +1 more ApostropheCMS uploadfs Azure backend leaks account-level SAS token into every public attachment URL (sas: true) CVE-2026-113652 Fix available 5.6 MediumOctober 20, 2026
• apostrophecms apostrophe, uploadfs +1 more ApostropheCMS: Path traversal in uploadfs CVE-2026-113651 Fix available 3.3 LowOctober 20, 2026