Self-Hosted-Photos

Immich Stored XSS to API Key Exfiltration and Account Hijacking (CVE-2026-35455) newCVE-2026-35455webHIGHPatched2026-07-05