.layout_main__DFqTq{display:block;min-height:50vh}.layout_main__DFqTq:after{content:"";display:table;clear:both}.layout_backToHome__D9QFr{margin:var(--space-8) 0 0}.layout_backToHome__D9QFr a{font-family:var(--font-mono);font-size:var(--font-size-sm);color:var(--pencil-text);text-decoration:none}.layout_backToHome__D9QFr a:hover{color:var(--terracotta-text);text-decoration:underline}.layout_footer__WlhMu{display:flex;flex-wrap:wrap;align-items:baseline;justify-content:space-between;gap:var(--space-2) var(--space-6);padding:var(--space-6) 0 var(--space-8);border-top:2px dashed var(--sage-rule-strong)}.layout_signature__rtdru{margin:0;font-size:1.9rem;line-height:1;color:var(--terracotta-text);transform:rotate(-3deg);transform-origin:left center}.layout_colophon__91LiN{margin:0;max-width:34rem;font-family:var(--font-mono);font-size:var(--font-size-xs);line-height:1.6;color:var(--pencil-text)}.layout_copyright__yuDki{letter-spacing:.05em;white-space:nowrap}.layout_sep__3L8Z9{margin:0 var(--space-2)}@media (max-width:640px){.layout_footer__WlhMu{flex-direction:column;gap:var(--space-4)}}.Navbar_navbar__GrSXC{position:-webkit-sticky;position:sticky;top:0;z-index:100;display:grid;grid-template-columns:auto 1fr auto;align-items:center;grid-gap:var(--space-4) var(--space-6);gap:var(--space-4) var(--space-6);padding:var(--space-4) 0 var(--space-3);background:var(--paper);border-bottom:1px solid var(--sage-rule-strong)}.Navbar_brand__JWn4W{display:inline-flex;flex-direction:column;line-height:1;color:var(--ink);text-decoration:none}.Navbar_brand__JWn4W:hover{color:var(--ink)}.Navbar_brandName__iIWVm{font-family:var(--font-serif);font-size:1.3rem;font-weight:700;letter-spacing:-.01em}.Navbar_brandSub__cqBeH{font-family:var(--font-hand);font-size:1rem;color:var(--terracotta-text);margin:.15rem 0 0 1.5rem;transform:rotate(-3deg);transform-origin:left center}.Navbar_nav__yFFPE{justify-self:end}.Navbar_navList__gzP7S{display:flex;align-items:center;flex-wrap:wrap;gap:var(--space-1) var(--space-2);list-style:none;margin:0;padding:0}.Navbar_navItem__Fpmiu{margin:0}.Navbar_navLink__16zHl{display:block;padding:var(--space-1) var(--space-2);font-family:var(--font-serif);font-size:1.1rem;font-weight:600;font-feature-settings:"smcp","c2sc";font-variant-caps:all-small-caps;letter-spacing:.08em;color:var(--ink-soft);text-decoration:none;background-image:linear-gradient(100deg,transparent 1%,var(--hl-terra) 4%,var(--hl-terra) 95%,transparent 99%);background-repeat:no-repeat;background-size:0 .7em;background-position:0 75%;transition:background-size var(--transition-base),color var(--transition-fast)}.Navbar_navLink__16zHl:hover{color:var(--ink);background-size:100% .7em}.Navbar_active__qyFWv{color:var(--ink);background-image:linear-gradient(100deg,transparent 1%,var(--hl-terra-strong) 4%,var(--hl-terra-strong) 95%,transparent 99%);background-position:0 80%}.Navbar_active__qyFWv,.Navbar_active__qyFWv:hover{background-size:100% .5em}@media (max-width:820px){.Navbar_navbar__GrSXC{grid-template-columns:1fr auto;padding-top:var(--space-3)}.Navbar_nav__yFFPE{grid-column:1/-1;grid-row:2;justify-self:stretch;overflow-x:auto;margin:0 calc(-1 * var(--space-2))}.Navbar_navList__gzP7S{flex-wrap:nowrap}.Navbar_navLink__16zHl{white-space:nowrap}}.ThemeToggle_toggle__RoeI1{display:inline-flex;align-items:center;gap:var(--space-1);padding:.4rem .7rem;font-family:var(--font-mono);font-size:.72rem;letter-spacing:.04em;color:var(--pencil-text);background:var(--card);border:1.5px solid var(--ink);border-radius:999px;box-shadow:2px 2px 0 var(--shadow-hard);cursor:pointer;transition:transform var(--transition-fast),box-shadow var(--transition-fast)}.ThemeToggle_toggle__RoeI1:hover{transform:translate(-1px,-1px);box-shadow:3px 3px 0 var(--shadow-hard)}.ThemeToggle_toggle__RoeI1:active{transform:translate(1px,1px);box-shadow:1px 1px 0 var(--shadow-hard)}.ThemeToggle_option__UyYKx{display:inline-flex;align-items:center;gap:.3rem;padding:.1rem .3rem;border-radius:999px}.ThemeToggle_current__eaHDP{color:var(--ink);font-weight:700;background-image:linear-gradient(100deg,transparent 2%,var(--hl-terra) 6%,var(--hl-terra) 94%,transparent 98%)}.ThemeToggle_slash__NXzOE{color:var(--pencil)}.ThemeToggle_icon__MJs1a{width:14px;height:14px}.ThemeToggle_placeholder__wBqzv{width:8.5rem;height:2rem}@media (prefers-reduced-motion:reduce){.ThemeToggle_toggle__RoeI1:active,.ThemeToggle_toggle__RoeI1:hover{transform:none}}.utils_heading2Xl__oxFoJ{font-size:var(--font-size-4xl);line-height:1.05;font-weight:700;letter-spacing:-.02em;margin:var(--space-4) 0}.utils_headingXl__zlq1q{font-size:clamp(2rem,4.2vw,2.9rem);line-height:1.1;font-weight:600;letter-spacing:-.02em;margin:0 0 var(--space-4)}.utils_headingLg__RYtYb{font-size:var(--font-size-4xl);line-height:1.05;font-weight:600;margin:0 0 var(--space-4)}.utils_headingMd__XQE5B{font-size:var(--font-size-lg);line-height:1.65}.utils_pageHeader__BZvQN{margin-bottom:var(--space-6)}.utils_borderCircle__zmKqF{border-radius:9999px;border:3px solid var(--card);box-shadow:0 0 0 2px var(--terracotta)}.utils_colorInherit__Jz9NS{color:inherit}.utils_padding1px__Ov2XA{padding-top:1px}.utils_list__zR_Au{list-style:none;padding:0;margin:0}.utils_listItem__6FEiz{padding:var(--space-4) 0;border-bottom:1px dashed var(--sage-rule-strong)}.utils_lightText__B_gv3{color:var(--pencil-text);font-size:var(--font-size-sm);font-family:var(--font-mono);letter-spacing:.02em}.security-research_pageHeader__uwk_d{margin-bottom:var(--space-8)}.security-research_pageDescription__b1DB_{color:var(--ink-soft);font-size:var(--font-size-lg);line-height:1.7;margin:0 0 var(--space-4)}.security-research_pageDescription__b1DB_ strong{color:var(--ink);font-family:var(--font-mono);font-size:.9em;background-image:linear-gradient(100deg,transparent 2%,var(--hl-sage) 5%,var(--hl-sage) 95%,transparent 98%);background-repeat:no-repeat;background-size:100% .6em;background-position:0 90%;padding:0 .15em}.security-research_contributorsLine__GXJbM{margin:0;font-family:var(--font-mono);font-size:var(--font-size-sm);color:var(--pencil-text)}.security-research_contributorsLine__GXJbM strong{color:var(--ink);font-weight:600}.security-research_contribSep__hBEnu{color:var(--pencil)}.security-research_statsBar___TpmX{display:grid;grid-template-columns:repeat(6,minmax(0,1fr));grid-gap:var(--space-5) var(--space-4);gap:var(--space-5) var(--space-4);margin:var(--space-6) 0 var(--space-10);padding:var(--space-6) var(--space-5) var(--space-5)}.security-research_stat__4FeXe{display:flex;flex-direction:column;gap:var(--space-1);padding-right:var(--space-3);border-right:1px dashed var(--sage-rule-strong)}.security-research_statValue__8kFbR{font-family:var(--font-serif);font-style:italic;font-weight:600;font-size:clamp(1.6rem,2.6vw,2.1rem);line-height:1;color:var(--terracotta);overflow-wrap:anywhere}.security-research_statLabel__T3wYi{font-family:var(--font-mono);font-size:.7rem;letter-spacing:.06em;text-transform:uppercase;line-height:1.4;color:var(--pencil-text)}.security-research_severityChart__shMnT{display:flex;flex-direction:column;gap:var(--space-2);margin:0;min-width:0}.security-research_bar_critical__KqETv{background:var(--terracotta-fill)!important}.security-research_bar_high__D4P3w{background:var(--terracotta)!important}.security-research_bar_medium___hIjb{background:var(--code-number)!important}.security-research_bar_low__wvH4r{background:var(--sage)!important}.security-research_pipelineGroup__G3BNx{margin-bottom:var(--space-10)}.security-research_sectionHeader__RyDiy{display:flex;align-items:baseline;flex-wrap:wrap;gap:var(--space-2) var(--space-3);margin:var(--space-8) 0 var(--space-5)}.security-research_sectionHeader__RyDiy:after{content:"";flex:1 1 3rem;border-top:2px dashed var(--sage-rule-strong);transform:translateY(-.3em);order:10}.security-research_sectionDot__Sc1fP{width:.7rem;height:.7rem;border-radius:50%;flex-shrink:0;align-self:center}.security-research_dotResolved___U_lg{background:var(--sage)}.security-research_dotProgram__uR7qJ{background:var(--terracotta)}.security-research_sectionTitle__m_Muv{font-size:var(--font-size-2xl);margin:0}.security-research_sectionCount__XvZL8{display:inline-grid;place-items:center;min-width:1.9rem;height:1.9rem;padding:0 .4rem;border:2px solid var(--terracotta);border-radius:52% 46% 55% 45%/47% 55% 45% 53%;font-family:var(--font-serif);font-style:italic;font-weight:600;font-size:var(--font-size-sm);color:var(--terracotta-text);transform:rotate(-6deg)}.security-research_sectionNote__Wsqi7,.security-research_subsectionNote__1T7xh{font-family:var(--font-hand);font-size:1.05rem;color:var(--terracotta-text);transform:rotate(-1deg)}.security-research_subsection__ZYcjH{margin-bottom:var(--space-8)}.security-research_subsectionHeader__8_ZMX{display:flex;align-items:baseline;flex-wrap:wrap;gap:var(--space-2) var(--space-3);margin:var(--space-5) 0 var(--space-4)}.security-research_subsectionLabel__mkyUN{font-family:var(--font-mono);font-size:var(--font-size-sm);font-weight:600;letter-spacing:.1em;text-transform:uppercase;color:var(--ink)}.security-research_findingsList__MsOjD{display:grid;grid-gap:var(--space-5);gap:var(--space-5)}.security-research_resolvedGrid__bnlBv{display:grid;grid-template-columns:repeat(2,minmax(0,1fr));grid-gap:var(--space-5);gap:var(--space-5)}.security-research_findingCard__BCrq_,.security-research_resolvedCard__qN9Pj{position:relative;display:flex;flex-direction:column;padding:var(--space-5);background:var(--card);border:1px solid var(--sage-rule-strong);border-top:3px solid var(--terracotta);border-radius:2px;box-shadow:3px 4px 0 var(--shadow-soft);color:inherit;text-decoration:none;transition:transform var(--transition-base),box-shadow var(--transition-base)}.security-research_resolvedCard__qN9Pj{border-top-color:var(--sage)}a.security-research_findingCard__BCrq_:hover{color:inherit;transform:translateY(-3px);box-shadow:5px 7px 0 var(--shadow-soft)}.security-research_findingTop__HGwIO,.security-research_resolvedTop__wj_1u{display:flex;align-items:center;flex-wrap:wrap;gap:var(--space-2);margin-bottom:var(--space-3)}.security-research_findingTarget__k5cY5{font-family:var(--font-mono);font-size:var(--font-size-xs);font-weight:600;color:var(--ink)}.security-research_findingDate__dZBBb{margin-left:auto;font-family:var(--font-mono);font-size:var(--font-size-xs);color:var(--pencil-text);white-space:nowrap}.security-research_findingTitle__uVVN4{font-size:var(--font-size-lg);line-height:1.35;margin:0 0 var(--space-3)}.security-research_findingDescription__eN0mD,.security-research_resolvedDescription__pqWxY{margin:0 0 var(--space-4);font-size:var(--font-size-base);line-height:1.6;color:var(--ink-soft)}.security-research_findingFooter__11zct,.security-research_resolvedFooter__ov9Hs{display:flex;align-items:center;justify-content:space-between;flex-wrap:wrap;gap:var(--space-2) var(--space-4);margin-top:auto;padding-top:var(--space-3);border-top:1px dashed var(--sage-rule-strong)}.security-research_footerLeft__fDhDq{display:inline-flex;align-items:center;flex-wrap:wrap;gap:var(--space-3)}.security-research_findingLink__2osyw{display:inline-flex;align-items:center;gap:.3rem;font-family:var(--font-mono);font-size:var(--font-size-xs);font-weight:600;color:var(--terracotta-text)}a.security-research_findingLink__2osyw:hover{color:var(--ink)}.security-research_foundBy__7PCjX{font-family:var(--font-mono);font-size:var(--font-size-xs);color:var(--pencil-text)}.security-research_foundByLink__iIf_S{display:inline-flex;align-items:center;gap:.2rem;color:var(--ink)}.security-research_foundByName__DyFDK{color:var(--ink)}.security-research_bountyBadge__9M0gb,.security-research_cveBadge____stp,.security-research_ghsaBadge__ugenY,.security-research_refBadge__B9M01,.security-research_severityBadge__Jwhh9,.security-research_statusPill__x2gsI{display:inline-block;font-family:var(--font-mono);font-size:.7rem;font-weight:600;line-height:1.2;letter-spacing:.04em;padding:.2rem .45rem;border-radius:var(--radius-sm);border:1px solid var(--sage-rule-strong);background:var(--paper-deep);color:var(--pencil-text);white-space:nowrap}.security-research_severityBadge__Jwhh9{text-transform:uppercase;letter-spacing:.1em}.security-research_severityCritical____G4Z{background:var(--terracotta-fill);border-color:var(--terracotta-fill);color:var(--on-terracotta)}.security-research_severityHigh__irTxW{background:transparent;border-color:var(--terracotta);color:var(--terracotta-text)}.security-research_severityMedium__wldx2{background:transparent;border-color:var(--code-number);color:var(--code-number)}.security-research_severityLow__9im7a{background:transparent;border-color:var(--sage);color:var(--sage-text)}.security-research_bountyBadge__9M0gb{color:var(--ink);background-image:linear-gradient(100deg,transparent 2%,var(--hl-sage) 5%,var(--hl-sage) 95%,transparent 98%)}.security-research_statusPill__x2gsI{border-radius:999px;padding:.2rem .6rem}.security-research_pillResolved__m_60g{color:var(--sage-text);border-color:var(--sage);background:transparent}.security-research_pillPending__kQa9_{color:var(--code-number);border-color:var(--code-number);border-style:dashed;background:transparent}.security-research_pillClosed__nLkmL{color:var(--pencil-text)}.security-research_pipelineFootnote__nCYo3{margin:var(--space-8) 0 0;padding-left:var(--space-4);border-left:2px dashed var(--terracotta);font-size:var(--font-size-sm);line-height:1.6;color:var(--pencil-text);font-style:italic}@media (max-width:1100px){.security-research_statsBar___TpmX{grid-template-columns:repeat(3,minmax(0,1fr))}.security-research_stat__4FeXe:nth-child(3n){border-right:0}}@media (max-width:760px){.security-research_resolvedGrid__bnlBv{grid-template-columns:minmax(0,1fr)}}@media (max-width:640px){.security-research_statsBar___TpmX{grid-template-columns:repeat(2,minmax(0,1fr))}.security-research_stat__4FeXe{border-right:0}.security-research_findingDate__dZBBb{margin-left:0}}@media (prefers-reduced-motion:reduce){a.security-research_findingCard__BCrq_:hover{transform:none}}