GHSA-78mf-482w-62qj: Nginx-UI: Cross-Site WebSocket Hijacking (CSWSH) via missing origin validation on all WebSocket endpoints

Nginx-UI has a security flaw where all WebSocket endpoints (connections that allow real-time two-way communication) accept connections from any website without checking if the request comes from a trusted source. Combined with authentication tokens stored as cookies without proper protection, an attacker can create a malicious webpage that, when visited by a logged-in administrator, secretly connects to nginx-UI and steals sensitive data like server metrics, logs, and even gains terminal access.