xss 4 GHSA-7fh4-27xm-vxgg「Stored XSS via image/svg+xml served inline by StaticDir / NamedFile」 Sep 3, 2026 Daily-AlpacaHack 「Slipboard」Hard Writeup May 31, 2026 Daily-AlpacaHack 「Hello Programmer!」Medium Writeup May 28, 2026 GHSA-c47g-2m49-r7hv「Stored XSS via unescaped filename in ?simple output」 Feb 3, 2026