ericmj decimal

• CVE-2026-97853 Medium 6.9 Unbounded allocation in decimal Decimal.round/3 driven by the places argument enables DoS 0.1%
• CVE-2026-32686 Medium 6.9 Unbounded exponent in decimal enables unauthenticated DoS 0.5%