Duke-git Lancet vulnerabilities

• duke-git lancet Lancet through 2.3.9 SSRF Protection Bypass via netutil.IsInternalIP CVE-2026-110240 6.3 MediumOctober 13, 2026
• duke-git lancet Zip slip in Lancet CVE-2022-41920 Fix available 6.3 MediumNovember 17, 2022