MEDIUMnpmGHSA-pcw7-5633-82vv· CVE-2026-22707Strapi Upload Plugin MIME Validation Bypass via Content APIModified: 5/16/2026