Kevva Decompress vulnerabilities

• kevva decompress @xhmikosr/decompress: Path traversal via symlink chain CVE-2026-101894 Public exploitFix available 9.1 CriticalSeptember 28, 2026