compression

• CVE-2026-48069 - grpc-js malformed compressed message crash 2026-06-13
• CVE-2026-39804 - Bandit permessage-deflate decompression DoS 2026-05-02