sellable_to_devsecops

• CVE-2026-58053 - Gitea act_runner Docker container options host escape 2026-06-28
• CVE-2026-55092 - Trivy OCI artifact title path traversal 2026-06-25