CVE-2026-30234 — OpenProject is an open-source, web-based project management software. Prior to 17.2.0, an authenticated project member with BCF import permissions can upload a crafted .bcf archive where the value in — CVE Database · The Intelligence Room