CVE-2026-121728 — SourceHut meta.sr.ht registration authorization bypass

SourceHut meta.sr.ht versions 0.56.11 through before 0.89.0 contain an authorization-bypass vulnerability that allows unauthenticated attackers to register accounts when public registration is disabled.