CVE-2025-43856 — immich is a high performance self-hosted photo and video management solution. Prior to 1.132.0, immich is vulnerable to account hijacking through oauth2, because the state parameter is not being check — CVE Database · The Intelligence Room