agentprime: codewithcj-sparkyfitnessEvery new CVE for codewithcj-sparkyfitness.https://agentprime.io/CVE-2026-113612: SparkyFitness before 0.17.0 Missing Authorization via food-variants DELETE Endpointhttps://agentprime.io/advisories/CVE-2026-113612/https://agentprime.io/advisories/CVE-2026-113612/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 20 Oct 2026 15:40:36 GMTCVECVE-2026-102923: SparkyFitness: SSRF via unvalidated custom_url in AI service settingshttps://agentprime.io/advisories/CVE-2026-102923/https://agentprime.io/advisories/CVE-2026-102923/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 16 Oct 2026 15:53:05 GMTCVECVE-2026-92263: SparkyFitness: Authenticated OS command injection (host RCE) via backup-restore filename in POST /api/admin/backup/restorehttps://agentprime.io/advisories/CVE-2026-92263/https://agentprime.io/advisories/CVE-2026-92263/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 16 Oct 2026 15:50:54 GMTCVE