Scikit-hep Uproot vulnerabilities

• scikit-hep uproot uproot 5.7.4 and prior Code Injection via TStreamerInfo Metadata CVE-2026-9147 Public exploit 8.5 HighJuly 18, 2026