Web-infra-dev Rsdoctor vulnerabilities

• web-infra-dev rsdoctor @rsdoctor/rspack-plugin has Unauthenticated HTTP API that Exposes Project Source Code and Build Metadata CVE-2026-61782 Fix available 7.5 HighSeptember 24, 2026