HubSpot jinjava

• CVE-2026-25526 Critical 9.8 JinJava Bypass through ForTag leads to Arbitrary Java Execution 1.0%
• CVE-2025-59340 Critical 9.8 jinjava Sandbox Bypass via JavaType-Based Deserialization 2.2%