Flintsh Flare vulnerabilities

• flintsh flare Flare has a Path Traversal in /api/avatars/[filename] CVE-2026-30942 8.3 HighMarch 10, 2026
• flintsh flare Flare: Private File IDOR via raw/direct endpoints CVE-2026-30231 6.0 MediumMarch 6, 2026
• flintsh flare Flare: Password‑Protected Thumbnail Bypass CVE-2026-30230 8.2 HighMarch 6, 2026
• flintsh flare Flare has XSS vulnerability in Raw File Preview CVE-2026-26993 4.6 MediumFebruary 20, 2026