token-leak 2

• Composer vulnerability leaks GitHub tokens, threatens PHP supply chain May 13, 2026
• SVD-2026-0407: Sensitive Information Disclosure in ''_internal'' index in Splunk MCP Server app Apr 16, 2026