cardano-scaling hydra

• CVE-2026-62162 High 8.2 Hydra: Deposit Claim omits Head state-token spending requirement 0.4%
• CVE-2025-48886 Medium 4.8 hydra-node dangerously assumes L1 event finality and does not consider failed transactions 0.3%