Walinejs Waline vulnerabilities

• walinejs waline Waline login accepts a non-string email as a match-all MongoDB query CVE-2026-55369 Fix available 6.5 MediumOctober 28, 2026