CVE-2026-33671 Picomatch has a ReDoS vulnerability via extglob quantifiers

CVE-2026-35611 Addressable has a Regular Expression Denial of Service in Addressable templates

Secrets are Rare not Random