upload

• CVE-2026-48062 - CodeIgniter4 ext_in upload validation bypass 2026-06-13
• CVE-2026-44974 - @hapi/content parameter smuggling upload-filter bypass 2026-06-08