CVE-2026-78154 the-momentum open-wearables Public Invitation-Code Redemption Endpoint user_invitation_code.py redeem_invitation_code missing authentication

[
  {
    "vendor": "the-momentum",
    "product": "open-wearables",
    "versions": [
      {
        "version": "0.6.0",
        "status": "affected"
      },
      {
        "version": "0.6.1",
        "status": "affected"
      },
      {
        "version": "0.6.2",
        "status": "affected"
      }
    ],
    "cpes": [
      "cpe:2.3:a:the-momentum:open-wearables:*:*:*:*:*:*:*:*"
    ],
    "modules": [
      "Public Invitation-Code Redemption Endpoint"
    ]
  }
]