TI-2026-71298 CVE-2026-109568 · GHSA-33mg-5c73-726gShaark Missing Authorization in Link, Story, Chest and Album API RoutesPriority LOW 31Shaark 1.2.13 through 1.2.44 contains a missing authorization vulnerability in the Link, Story, Chest and Album API controllers that skips ownership checks.CVSS 4.0HIGH 7.1· Network · Low privileges · No interaction · EPSS 0.00246 · Published 2026-10-12 · No fix listed CWE-639