fix: resolve CVE-2026-33036, CVE-2026-1528, CVE-2026-33210#305

Merged

msingleton merged 3 commits intomainfrom

mike/CVE-2026-33036

Mar 25, 2026

Commits on Mar 20, 2026

fix: resolve CVE-2026-33036 fast-xml-parser numeric entity expansion DoS

msingleton
and
claude
committed
fix: resolve CVE-2026-1528 undici WebSocket frame length overflow DoS

msingleton
and
claude
committed
fix: resolve CVE-2026-33210 json gem format string injection

msingleton
and
claude
committed