availability

• CVE-2026-48507 - Snipe-IT bulk user lockout privilege escalation 2026-06-24
• CVE-2026-34077 - React Router Single Fetch serialization DoS 2026-06-08
• CVE-2026-41680 - marked tokenizer OOM denial of service 2026-06-07
• CVE-2026-42342 - React Router __manifest path-expansion DoS 2026-06-06