CRITICALcrates.ioGHSA-fxc9-7j2w-vx54mpp has multiple payment bypass and griefing vulnerabilitiesModified: 3/29/2026