CVE-2025-14223: carmelo simple leave manager – CVSS 9.8 · Watchpost