quick-xml vulnerabilities (crates.io)

2 vulnerabilities.

• quick-xml crates.io Unbounded namespace-declaration allocation in `NsReader` enables memory-exhaustion denial of service RUSTSEC-2026-0195 Fix available 7.5 HighJune 29, 2026
• quick-xml crates.io Quadratic run time when checking a start tag for duplicate attribute names RUSTSEC-2026-0194 Fix available 7.5 HighJune 29, 2026