—HexEEF-CVE-2026-65636· CVE-2026-65636, GHSA-p8qx-7cp9-v6c9YAML injection via unescaped newlines in ymlr document commentsModified: 9/8/2026