Ghostfol Ghostfolio vulnerabilities

• ghostfol ghostfolio Ghostfolio: Time-Based Blind SQL Injection in Manual Asset Import CVE-2026-28785 9.3 CriticalMarch 6, 2026
• ghostfol ghostfolio Ghostfolio: Full-Read SSRF in Manual Asset Import CVE-2026-28680 9.3 CriticalMarch 6, 2026