CVE-2026-119300 Wekan: ReDoS via Unescaped User Input in RegExp

Wekan is open source kanban built with Meteor. Prior to 11.11, the user-search publication in server/publications/users.js and the searchUsers method in server/models/users.js pass authenticated user-controlled searchTerm and query values to new RegExp without escaping regular-expression...