flask 3 Exposed Git Repository Leads to Administrative Credential Disclosure | Fault Banking Jun 4, 2026 IDOR – Unauthorized Grant Approval via Workflow Manipulation | Briarcliff Foundation Jun 1, 2026 Jinja2 SSTI to Remote Code Execution | SunnySide May 8, 2026