salvo 1 BUGHUNT:🔍 Stored XSS via image/svg+xml served inline by StaticDir / NamedFile (GHSA-7fh4-27xm-vxgg) Sep 3, 2026