junkurihara httpsig-rs

• CVE-2026-26275 High 7.5 httpsig-hyper has Improper Digest Verification that May Allow Message Integrity Bypass 0.2%
• CVE-2025-59058 Medium 5.9 httpsig-rs's HMAC verification is vulnerable to timing attack 0.3%