Progress Software KendoReact

• CVE-2026-106138 Medium 5.4 Cross-Site Scripting via Chart Tooltip in KendoReact 0.1%
• CVE-2025-6725 Medium 5.4 Cross-Site Scripting (XSS) in PdfViewer 0.3%