Jleehr Canto-saas-api vulnerabilities

• jleehr canto-saas-api canto-saas-api: OAuth credentials exposed in URL query string and exception messages CVE-2026-55375 Fix available 5.3 MediumJune 19, 2026
• jleehr canto-saas-api canto-saas-api: Authenticated API requests can be redirected via unencoded path variables CVE-2026-55374 Fix available 4.8 MediumJune 19, 2026