kyz libmspack

• CVE-2026-119602 Low 3.7 libmspack through 0.11alpha Uninitialized Memory Disclosure via MS-ZIP Decompressor Window 0.3%
• CVE-2026-110602 Medium 6.3 libmspack through 0.11alpha Uninitialized Pointer Free via kwajd_open Error Path 0.2%