brian-ruf OSCAL-GUI

• CVE-2026-34417 Medium 6.1 OSCAL-GUI Reflected XSS via project parameter in oscal-forms.php 0.2%
• CVE-2026-34416 Medium 6.1 OSCAL-GUI Reflected XSS via project parameter in oscal.php 0.2%