Add security note for OSSA-2026-005 (CVE-2026-33551)

[berendt]

AI-assisted: Claude Code

[github-actions]

✅⚠️MegaLinter analysis: Success with warnings

Descriptor	Linter	Files	Fixed	Errors	Warnings	Elapsed time
✅ ACTION	actionlint	3		0	0	0.05s
✅ JSON	jsonlint	4		0	0	0.15s
✅ JSON	prettier	4		0	0	0.56s
✅ JSON	v8r	4		0	0	5.68s
✅ MARKDOWN	markdownlint	156		0	0	2.23s
⚠️ MARKDOWN	markdown-table-formatter	156		1	0	0.43s
✅ REPOSITORY	checkov	yes		no	no	17.26s
✅ REPOSITORY	git_diff	yes		no	no	0.06s
✅ REPOSITORY	secretlint	yes		no	no	1.6s
✅ REPOSITORY	trufflehog	yes		no	no	4.09s
✅ SPELL	codespell	164		0	0	0.47s
✅ SPELL	lychee	164		0	0	52.29s
✅ YAML	prettier	4		0	0	0.39s
✅ YAML	v8r	4		0	0	5.64s
✅ YAML	yamllint	4		0	0	0.34s

Detailed Issues

⚠️ MARKDOWN / markdown-table-formatter - 1 error

1 files contain markdown tables to format:
- docs/appendix/security/ossa-2026-005.md

See detailed reports in MegaLinter artifacts

Your project could benefit from a custom flavor, which would allow you to run only the linters you need, and thus improve runtime performances. (Skip this info by defining FLAVOR_SUGGESTIONS: false)

• Documentation: Custom Flavors
• Command: npx mega-linter-runner@9.4.0 --custom-flavor-setup --custom-flavor-linters ACTION_ACTIONLINT,JSON_JSONLINT,JSON_V8R,JSON_PRETTIER,MARKDOWN_MARKDOWNLINT,MARKDOWN_MARKDOWN_TABLE_FORMATTER,REPOSITORY_CHECKOV,REPOSITORY_GIT_DIFF,REPOSITORY_SECRETLINT,REPOSITORY_TRUFFLEHOG,SPELL_LYCHEE,SPELL_CODESPELL,YAML_PRETTIER,YAML_YAMLLINT,YAML_V8R

Show us your support by starring ⭐ the repository