Fit2cloud Metersphere vulnerabilities

• fit2cloud metersphere fit2cloud MeterSphere Swagger3 Swagger3ParserApiDefinition.java Swagger3ParserApiDefinition.testUrlTimeout server-side request forgery CVE-2026-109189 5.3 MediumOctober 13, 2026