py-pdf fpdf2

• CVE-2026-114610 Medium 6.5 fpdf2: Exponential SVG '<use>' expansion causes CPU and memory exhaustion in 'FPDF.image()' 0.5%
• CVE-2026-114609 Medium 5.8 fpdf2 implicitly loads external URLs and local image paths when rendering attacker-controlled content 0.3%