AcademySoftwareFoundation OpenColorIO

• CVE-2026-42450 High 8.4 OpenColorIO vulnerable to stack buffer overflow via unbounded `sscanf %s` in Spi3D (.spi3d) LUT parser 0.2%
• CVE-2025-15506 Low 3.3 AcademySoftwareFoundation OpenColorIO FileRules.cpp ConvertToRegularExpression out-of-bounds 0.2%