agentprime: mayswind-ezbookkeepingEvery new CVE for mayswind-ezbookkeeping.https://agentprime.io/CVE-2026-86041: ezBookkeeping: Source-IP allowlist (MCP & API token) is bypassable via a spoofed `X-Forwarded-For` headerhttps://agentprime.io/advisories/CVE-2026-86041/https://agentprime.io/advisories/CVE-2026-86041/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 22:15:56 GMTCVECVE-2026-105131: mayswind ezBookkeeping 1.2.0 before 2.0.1 Privilege Escalation via Token Refresh Endpointhttps://agentprime.io/advisories/CVE-2026-105131/https://agentprime.io/advisories/CVE-2026-105131/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 04 Oct 2026 01:20:29 GMTCVECVE-2026-94112: mayswind ezBookkeeping before 2.0.0 TOTP Replay Attackhttps://agentprime.io/advisories/CVE-2026-94112/https://agentprime.io/advisories/CVE-2026-94112/CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Sun, 20 Sep 2026 11:56:07 GMTCVE