callback

• CVE-2026-46595 - Go x/crypto ssh VerifiedPublicKeyCallback auth bypass 2026-06-26
• CVE-2026-24425 - Twig SourcePolicyInterface callback bypass 2026-06-07