CycloneDX cyclonedx-node-npm

• CVE-2026-71538 High 8.5 @cyclonedx/cyclonedx-npm: Shell Injection via Unsanitized --workspace Argument on Windows 0.2%
• CVE-2026-55849 High 8.5 @cyclonedx/cyclonedx-npm: Shell Injection via Unsanitized `--workspace` Argument 0.2%