CRITICAL9.3npmMavenPyPINuGetGHSA-rmjr-87wv-gf87· CVE-2025-11849, PYSEC-2026-1603Mammoth is vulnerable to Directory TraversalModified: 7/7/2026