Milesmcc Shynet vulnerabilities

• milesmcc shynet Shynet before 0.14.0 allows XSS in urldisplay and iconify template filters, CVE-2026-35508 5.4 MediumApril 3, 2026
• milesmcc shynet Shynet before 0.14.0 allows Host header injection in the password reset flow. CVE-2026-35507 6.4 MediumApril 3, 2026