Cmu Cveclient vulnerabilities

• cert/cc cveclient/encrypt-storage.js, cmu cveclient +1 more Private Key stored as extractable in browser IndexeDB CVE-2026-35467 7.5 HighApril 2, 2026
• cert/cc cveclient/cveinterface.js, cmu cveclient +1 more Stored XSS via unsanitized input from remote service CVE-2026-35466 6.1 MediumApril 2, 2026