[MEDIUM] Firefly II has Stored XSS in Audit Log Entry view via piggy bank name (ale.twig)

PKSA-197r-m2ry-57db GHSA-6jq6-x4cx-qvcm

Affected version: <=6.6.2

Reported by:
GitHub

[MEDIUM] Firefly III user API endpoints expose all users' information to any authenticated user (IDOR)

PKSA-gsvb-yc3b-2hf2 GHSA-5q8v-j673-m5v4

Affected version: >=6.4.23,<=6.5.0

Reported by:
GitHub