Cheaper-inference Omniroute vulnerabilities

• cheaper-inference omniroute OmniRoute 3.8.0 before 3.8.52 Unverified Password Change via /api/settings/require-login CVE-2026-118984 7.0 HighOctober 29, 2026
• cheaper-inference omniroute OmniRoute 3.8.50 before 3.8.52 Missing Authentication via /api/sync/tokens CVE-2026-116634 8.2 HighOctober 26, 2026