ulikunitz xz

• CVE-2025-58058 Medium 5.3 github.com/ulikunitz/xz leaks memory when decoding a corrupted multiple LZMA archives 0.4%
• CVE-2021-29482 High 7.5 denial of service in github.com/ulikunitz/xz 1.4%