Update: Since the ticket was created, we have received three additional CVE identifiers:
GHSA-5m93-4h75-3p2w -> CVE-2026-103932 GHSA-qrch-pjfr-9g47 -> CVE-2026-104259 GHSA-5pww-8rfg-9crf -> CVE-2026-104269 I'll use CVE ID's in d/changelog where it is possible. Regards, a.

