@font-face{font-family:'Public Sans';font-style:italic;font-weight:400;font-display:swap;src:url(/assets/fonts/public-sans-latin-ext-0.woff2) format('woff2');unicode-range:U+0100-02BA,U+02BD-02C5,U+02C7-02CC,U+02CE-02D7,U+02DD-02FF,U+0304,U+0308,U+0329,U+1D00-1DBF,U+1E00-1E9F,U+1EF2-1EFF,U+2020,U+20A0-20AB,U+20AD-20C0,U+2113,U+2C60-2C7F,U+A720-A7FF}@font-face{font-family:'Public Sans';font-style:italic;font-weight:400;font-display:swap;src:url(/assets/fonts/public-sans-latin-1.woff2) format('woff2');unicode-range:U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-206F,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD}@font-face{font-family:'Public Sans';font-style:normal;font-weight:400 700;font-display:swap;src:url(/assets/fonts/public-sans-latin-ext-2.woff2) format('woff2');unicode-range:U+0100-02BA,U+02BD-02C5,U+02C7-02CC,U+02CE-02D7,U+02DD-02FF,U+0304,U+0308,U+0329,U+1D00-1DBF,U+1E00-1E9F,U+1EF2-1EFF,U+2020,U+20A0-20AB,U+20AD-20C0,U+2113,U+2C60-2C7F,U+A720-A7FF}@font-face{font-family:'Public Sans';font-style:normal;font-weight:400 700;font-display:swap;src:url(/assets/fonts/public-sans-latin-3.woff2) format('woff2');unicode-range:U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-206F,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD}*,*::before,*::after{box-sizing:border-box}html{-webkit-text-size-adjust:100%}body{margin:0}h1,h2,h3,h4,h5,h6,p,figure,blockquote,dl,dd{margin:0}ul[class],ol[class]{list-style:none;margin:0;padding:0}img,svg{max-width:100%;height:auto;display:block}table{border-collapse:collapse;width:100%}input,button,select{font:inherit;color:inherit}.table-scroll{overflow-x:auto;-webkit-overflow-scrolling:touch}.anchor{margin-left:.4em;opacity:0;text-decoration:none;font-weight:400;transition:opacity .12s ease}h2:hover .anchor,h3:hover .anchor,.anchor:focus-visible{opacity:.55}.skip{position:absolute;left:-9999px;top:0;padding:.6rem 1rem;z-index:100}.skip:focus{left:.5rem;top:.5rem}:where(a,button,input,summary):focus-visible{outline:2px solid currentColor;outline-offset:2px}@media (prefers-reduced-motion:reduce){*,*::before,*::after{animation-duration:.01ms !important;transition-duration:.01ms !important}}.visually-hidden{position:absolute;width:1px;height:1px;padding:0;margin:-1px;overflow:hidden;clip:rect(0 0 0 0);white-space:nowrap;border:0}:root{--bg:#ffffff;--panel:#f7f8f9;--ink:#111418;--ink-2:#3e444d;--ink-3:#6b727c;--line:#dfe2e6;--line-2:#b9bec6;--link:#14497e;--sev-crit:#8b1a1a;--sev-high:#a4441a;--sev-med:#6b5a12;--sev-low:#4a5560;--sans:"Public Sans",-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,Helvetica,Arial,sans-serif;--mono:ui-monospace,SFMono-Regular,"SF Mono",Menlo,Consolas,"Liberation Mono",monospace;--wide:68rem;--pad:1.5rem}@media (prefers-color-scheme:dark){:root{--bg:#0f1114;--panel:#16191d;--ink:#e7e9ec;--ink-2:#b0b6be;--ink-3:#7f868f;--line:#262a30;--line-2:#3b4048;--link:#86b3e6;--sev-crit:#e08282;--sev-high:#e0a07a;--sev-med:#ccbb72;--sev-low:#9aa5b1}}html{background:var(--bg)}body{background:var(--bg);color:var(--ink);font-family:var(--sans);font-size:1rem;line-height:1.58}.top{border-bottom:2px solid var(--ink)}.top-inner{max-width:var(--wide);margin:0 auto;padding:1.1rem var(--pad) .8rem;display:flex;align-items:baseline;gap:1rem;flex-wrap:wrap}.logo{font-size:1.15rem;font-weight:700;letter-spacing:-.02em;color:var(--ink);text-decoration:none}.logo em{font-style:normal;font-weight:400;color:var(--ink-3)}.dateline{margin-left:auto;font-family:var(--mono);font-size:.75rem;color:var(--ink-3)}.sections{max-width:var(--wide);margin:0 auto;padding:0 var(--pad) .75rem;display:flex;flex-wrap:wrap;gap:0 1.3rem}.sections a{font-size:.8125rem;font-weight:600;color:var(--ink-2);text-decoration:none;padding-bottom:.15rem;border-bottom:2px solid transparent}.sections a:hover{color:var(--ink)}.sections a[aria-current]{color:var(--ink);border-bottom-color:var(--sev-high)}main{max-width:var(--wide);margin:0 auto;padding:1.8rem var(--pad) 4rem}.wire{border-top:1px solid var(--line)}.item{display:grid;grid-template-columns:7.5rem minmax(0,1fr);gap:0 1.6rem;padding:1rem 0;border-bottom:1px solid var(--line)}@media (max-width:44rem){.item{grid-template-columns:1fr;gap:.3rem}}.item .when{font-family:var(--mono);font-size:.75rem;color:var(--ink-3);padding-top:.18rem;white-space:nowrap}.item h3{font-size:1.02rem;font-weight:600;margin:0 0 .25rem;line-height:1.35}.item h3 a{color:var(--ink);text-decoration:none}.item h3 a:hover{color:var(--link);text-decoration:underline}.item p{margin:0;font-size:.9rem;color:var(--ink-2)}.item .tags{margin-top:.35rem;display:flex;flex-wrap:wrap;gap:.3rem .5rem}.tag{font-family:var(--mono);font-size:.68rem;text-transform:uppercase;letter-spacing:.05em;border:1px solid var(--line-2);color:var(--ink-2);padding:.05rem .35rem;white-space:nowrap}.tag.crit{color:var(--sev-crit);border-color:currentColor;font-weight:500}.tag.high{color:var(--sev-high);border-color:currentColor}.tag.med{color:var(--sev-med);border-color:currentColor}.tag.low{color:var(--sev-low)}.tag.kev{color:var(--sev-crit);border-color:currentColor;font-weight:500}.advisory{display:grid;grid-template-columns:minmax(0,1fr) 15rem;gap:0 3rem}@media (max-width:58rem){.advisory{grid-template-columns:1fr}}.advisory-main{min-width:0}.advisory h1{font-size:clamp(1.5rem,1.25rem + 1.2vw,2.05rem);font-weight:700;line-height:1.18;letter-spacing:-.02em;margin:.3rem 0 .6rem;text-wrap:balance}.advisory .summary{font-size:1.08rem;color:var(--ink-2);margin:0 0 1.4rem;max-width:40rem}.facts{border-top:1px solid var(--ink);border-bottom:1px solid var(--line);padding:.8rem 0 1rem;margin:0 0 1.6rem;font-size:.85rem}.facts dl{display:grid;grid-template-columns:8.5rem minmax(0,1fr);gap:.4rem 1rem;margin:0}.facts dt{color:var(--ink-3);font-size:.78rem}.facts dd{margin:0;word-break:break-word}.facts dd.m{font-family:var(--mono);font-size:.8rem}.advisory-main h2{font-size:1.02rem;font-weight:700;margin:2.2rem 0 .5rem;padding-bottom:.3rem;border-bottom:1px solid var(--line)}.advisory-main h3{font-size:.92rem;font-weight:600;margin:1.4rem 0 .4rem}.advisory-main p{margin:0 0 .95rem;max-width:40rem}.advisory-main ul,.advisory-main ol{margin:0 0 1rem;padding-left:1.2rem;max-width:40rem}.advisory-main li{margin-bottom:.35rem}a{color:var(--link);text-underline-offset:.15em}code{font-family:var(--mono);font-size:.86em;background:var(--panel);padding:.08em .3em;border:1px solid var(--line)}pre{font-family:var(--mono);font-size:.8rem;background:var(--panel);border:1px solid var(--line);padding:.8rem 1rem;overflow-x:auto}pre code{border:0;background:none;padding:0}table{font-size:.85rem;margin:0 0 1.2rem;font-variant-numeric:tabular-nums}thead th{text-align:left;font-size:.7rem;text-transform:uppercase;letter-spacing:.06em;color:var(--ink-3);font-weight:600;padding:0 .8rem .35rem 0;border-bottom:1px solid var(--line-2)}tbody td{padding:.42rem .8rem .42rem 0;border-bottom:1px solid var(--line);vertical-align:top}td.m{font-family:var(--mono);font-size:.8rem}.revisions{font-size:.82rem;color:var(--ink-2)}.revisions ol{list-style:none;margin:0;padding:0}.revisions li{display:grid;grid-template-columns:6.5rem 1fr;gap:1rem;padding:.35rem 0;border-bottom:1px solid var(--line)}.revisions .rev-when{font-family:var(--mono);font-size:.75rem;color:var(--ink-3)}.rail{font-size:.85rem}.rail section{margin-bottom:1.8rem}.rail h2{font-size:.7rem;text-transform:uppercase;letter-spacing:.09em;color:var(--ink-3);font-weight:700;margin:0 0 .5rem}.rail ul{list-style:none;margin:0;padding:0}.rail li{margin-bottom:.4rem;line-height:1.4}.rail a{color:var(--ink-2);text-decoration:none}.rail a:hover{color:var(--link);text-decoration:underline}.lead{border-bottom:2px solid var(--ink);padding-bottom:1.4rem;margin-bottom:1.6rem}.lead h1{font-size:clamp(1.5rem,1.3rem + 1vw,1.95rem);font-weight:700;letter-spacing:-.02em;margin:0 0 .4rem}.lead p{margin:0;color:var(--ink-2);max-width:42rem}.split{display:grid;grid-template-columns:minmax(0,1fr) 17rem;gap:0 3rem}@media (max-width:58rem){.split{grid-template-columns:1fr}}h2.section-head{font-size:.75rem;text-transform:uppercase;letter-spacing:.1em;font-weight:700;color:var(--ink-3);margin:2.2rem 0 .3rem}h2.section-head:first-child{margin-top:0}.coverage{border:1px solid var(--line);background:var(--panel);padding:.9rem 1.1rem;font-size:.82rem;color:var(--ink-2);line-height:1.55}.coverage b{color:var(--ink)}.breadcrumbs{font-size:.75rem;margin:0 0 .4rem;color:var(--ink-3)}.breadcrumbs ol{list-style:none;margin:0;padding:0;display:flex;flex-wrap:wrap;gap:.3rem}.breadcrumbs li + li::before{content:"/";margin-right:.3rem;color:var(--line-2)}.breadcrumbs a{color:var(--ink-3);text-decoration:none}.foot{border-top:2px solid var(--ink)}.foot-inner{max-width:var(--wide);margin:0 auto;padding:1.5rem var(--pad) 2.5rem;font-size:.8125rem;color:var(--ink-3);display:grid;grid-template-columns:minmax(0,2fr) repeat(auto-fit,minmax(9rem,1fr));gap:1.4rem 2.5rem}.foot h2{font-size:.68rem;text-transform:uppercase;letter-spacing:.09em;margin:0 0 .45rem;color:var(--ink-3)}.foot ul{list-style:none;margin:0;padding:0}.foot li{margin-bottom:.25rem}.foot a{color:var(--ink-2);text-decoration:none}.foot a:hover{text-decoration:underline}.foot p{margin:0 0 .6rem}.notfound{padding:3.5rem 0 6rem;max-width:42rem}.notfound h1{font-size:1.7rem;font-weight:700;margin-bottom:.6rem}.unpublished{color:var(--ink-3);border-bottom:1px dotted var(--line-2)}