Legeling Prompthub vulnerabilities

• legeling prompthub PromptHub: Authenticated SSRF via IPv6 filter bypass in `POST /api/skills/fetch-remote` CVE-2026-42261 7.1 HighMay 8, 2026