allure-framework allure2

• CVE-2026-55847 Medium 6.1 Allure: Stored XSS via unescaped ANSI helper in Allure report status message/trace rendering 0.3%
• CVE-2026-55846 Medium 6.2 Allure: Path Traversal in Allure Report HTTP Server Allows Arbitrary File Read 0.2%
• CVE-2026-33166 High 8.6 Allure Report has an Arbitrary File Read via Path Traversal in Attachment Processing (Allure 1, Allure 2, and XCTest Readers) 0.6%
• CVE-2025-52888 High 7.5 Allure 2's xunit-xml-plugin Vulnerable to Improper XXE Restriction 0.4%