arduino ArduinoCore-avr

• CVE-2026-48490 Medium 6.9 ArduinoCore-AVR: Stack-Based Buffer Overflow in String float/double concatenation handler 0.7%
• CVE-2025-69209 Medium 6.9 ArduinoCore-avr has Stack-Based Buffer Overflow in WString Float/Double Constructors 0.2%