Haxtheweb @haxtheweb/open-apis vulnerabilities

• haxtheweb @haxtheweb/open-apis HAX open-apis: Credential Theft via Server-Side Request Forgery (SSRF) in open-apis CVE-2026-46391 Public exploitFix available 8.7 HighMay 19, 2026