CVE-2026-84155: Ericsson CodeChecker: CodeChecker's web server fails to fully invalidate a session token on logout when the server runs with more than one…

CodeChecker's web server fails to fully invalidate a session token on logout when the server runs with more than one API worker process the default. Each worker process maintains its own in-memory session cache; logout only clears the cache of the single worker that handles the request plus the...