Strapi @strapi/upload vulnerabilities

• strapi, strapi @strapi/upload +1 more Strapi Upload Plugin MIME Validation Bypass via Content API CVE-2026-22707 Fix available 5.3 MediumMay 14, 2026