Lud vulnerabilities

Newest

• lud jsv jsv treats regex match budget exhaustion as a non-match, bypassing patternProperties and not CVE-2026-117680 Fix available 2.1 LowNovember 1, 2026
• lud oaskit Reflected XSS in oaskit's default HTML error handler CVE-2026-66296 Fix available 5.1 MediumAugust 3, 2026