xss 4 Stored XSS via image/svg+xml served inline by StaticDir / NamedFile (GHSA-7fh4-27xm-vxgg) Sep 3, 2026 Daily-AlpacaHack 「Slipboard」Hard Writeup May 31, 2026 Daily-AlpacaHack 「Hello Programmer!」Medium Writeup May 28, 2026 Stored XSS via unescaped filename in ?simple output (GHSA-c47g-2m49-r7hv) Feb 3, 2026