@font-face{font-family:"Source Serif 4 Variable";font-style:normal;font-display:swap;font-weight:200 900;src:url(/_astro/source-serif-4-cyrillic-ext-opsz-normal.DIwfbPUE.woff2)format("woff2-variations");unicode-range:U+460-52F,U+1C80-1C8A,U+20B4,U+2DE0-2DFF,U+A640-A69F,U+FE2E-FE2F}@font-face{font-family:"Source Serif 4 Variable";font-style:normal;font-display:swap;font-weight:200 900;src:url(/_astro/source-serif-4-cyrillic-opsz-normal.C0olyEE-.woff2)format("woff2-variations");unicode-range:U+301,U+400-45F,U+490-491,U+4B0-4B1,U+2116}@font-face{font-family:"Source Serif 4 Variable";font-style:normal;font-display:swap;font-weight:200 900;src:url(/_astro/source-serif-4-greek-opsz-normal.DrHU7SY7.woff2)format("woff2-variations");unicode-range:U+370-377,U+37A-37F,U+384-38A,U+38C,U+38E-3A1,U+3A3-3FF}@font-face{font-family:"Source Serif 4 Variable";font-style:normal;font-display:swap;font-weight:200 900;src:url(/_astro/source-serif-4-vietnamese-opsz-normal.BOyYyU_V.woff2)format("woff2-variations");unicode-range:U+102-103,U+110-111,U+128-129,U+168-169,U+1A0-1A1,U+1AF-1B0,U+300-301,U+303-304,U+308-309,U+323,U+329,U+1EA0-1EF9,U+20AB}@font-face{font-family:"Source Serif 4 Variable";font-style:normal;font-display:swap;font-weight:200 900;src:url(/_astro/source-serif-4-latin-ext-opsz-normal.HoL-AExg.woff2)format("woff2-variations");unicode-range:U+100-2BA,U+2BD-2C5,U+2C7-2CC,U+2CE-2D7,U+2DD-2FF,U+304,U+308,U+329,U+1D00-1DBF,U+1E00-1E9F,U+1EF2-1EFF,U+2020,U+20A0-20AB,U+20AD-20C0,U+2113,U+2C60-2C7F,U+A720-A7FF}@font-face{font-family:"Source Serif 4 Variable";font-style:normal;font-display:swap;font-weight:200 900;src:url(/_astro/source-serif-4-latin-opsz-normal.BpEBLj1O.woff2)format("woff2-variations");unicode-range:U+??,U+131,U+152-153,U+2BB-2BC,U+2C6,U+2DA,U+2DC,U+304,U+308,U+329,U+2000-206F,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD}@font-face{font-family:"Source Serif 4 Variable";font-style:italic;font-display:swap;font-weight:200 900;src:url(/_astro/source-serif-4-cyrillic-ext-opsz-italic.Bl6DJqma.woff2)format("woff2-variations");unicode-range:U+460-52F,U+1C80-1C8A,U+20B4,U+2DE0-2DFF,U+A640-A69F,U+FE2E-FE2F}@font-face{font-family:"Source Serif 4 Variable";font-style:italic;font-display:swap;font-weight:200 900;src:url(/_astro/source-serif-4-cyrillic-opsz-italic.Dibx14aP.woff2)format("woff2-variations");unicode-range:U+301,U+400-45F,U+490-491,U+4B0-4B1,U+2116}@font-face{font-family:"Source Serif 4 Variable";font-style:italic;font-display:swap;font-weight:200 900;src:url(/_astro/source-serif-4-greek-opsz-italic.CMW9dfKg.woff2)format("woff2-variations");unicode-range:U+370-377,U+37A-37F,U+384-38A,U+38C,U+38E-3A1,U+3A3-3FF}@font-face{font-family:"Source Serif 4 Variable";font-style:italic;font-display:swap;font-weight:200 900;src:url(/_astro/source-serif-4-vietnamese-opsz-italic.C-k5pZlm.woff2)format("woff2-variations");unicode-range:U+102-103,U+110-111,U+128-129,U+168-169,U+1A0-1A1,U+1AF-1B0,U+300-301,U+303-304,U+308-309,U+323,U+329,U+1EA0-1EF9,U+20AB}@font-face{font-family:"Source Serif 4 Variable";font-style:italic;font-display:swap;font-weight:200 900;src:url(/_astro/source-serif-4-latin-ext-opsz-italic.BhUEwDRF.woff2)format("woff2-variations");unicode-range:U+100-2BA,U+2BD-2C5,U+2C7-2CC,U+2CE-2D7,U+2DD-2FF,U+304,U+308,U+329,U+1D00-1DBF,U+1E00-1E9F,U+1EF2-1EFF,U+2020,U+20A0-20AB,U+20AD-20C0,U+2113,U+2C60-2C7F,U+A720-A7FF}@font-face{font-family:"Source Serif 4 Variable";font-style:italic;font-display:swap;font-weight:200 900;src:url(/_astro/source-serif-4-latin-opsz-italic.BOLXpvkj.woff2)format("woff2-variations");unicode-range:U+??,U+131,U+152-153,U+2BB-2BC,U+2C6,U+2DA,U+2DC,U+304,U+308,U+329,U+2000-206F,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD}@font-face{font-family:IBM Plex Mono;font-style:normal;font-display:swap;font-weight:400;src:url(/_astro/ibm-plex-mono-latin-400-normal.DMJ8VG8y.woff2)format("woff2"),url(/_astro/ibm-plex-mono-latin-400-normal.CvHOgSBP.woff)format("woff")}@font-face{font-family:IBM Plex Mono;font-style:normal;font-display:swap;font-weight:500;src:url(/_astro/ibm-plex-mono-latin-500-normal.DSY6xOcd.woff2)format("woff2"),url(/_astro/ibm-plex-mono-latin-500-normal.CB9ihrfo.woff)format("woff")}@font-face{font-family:IBM Plex Mono;font-style:normal;font-display:swap;font-weight:600;src:url(/_astro/ibm-plex-mono-latin-600-normal.BgSNZQsw.woff2)format("woff2"),url(/_astro/ibm-plex-mono-latin-600-normal.DWFSQ4vo.woff)format("woff")}:root{--paper:#f3f1eb;--paper-2:#e9e6de;--ink:#141311;--ink-2:#47443d;--ink-3:#686459;--rule:#d3cec3;--rule-strong:#141311;--signal:#b3261e;--tone-critical:#b3261e;--tone-high:#b8430d;--tone-medium:#8a5d00;--tone-low:#47443d;--tone-none:#686459;--serif:"Source Serif 4 Variable", "Source Serif Pro", Georgia, "Times New Roman", serif;--mono:"IBM Plex Mono", ui-monospace, "SFMono-Regular", Menlo, Consolas, monospace;--wrap:78rem;--measure:66ch;--rail:13.5rem;--hang:2.75rem}@media (prefers-color-scheme:dark){:root{--paper:#11110f;--paper-2:#1b1a17;--ink:#e8e5dc;--ink-2:#b8b3a7;--ink-3:#8f8a7f;--rule:#33312c;--rule-strong:#e8e5dc;--signal:#ff6a55;--tone-critical:#ff6a55;--tone-high:#ff9150;--tone-medium:#e6b54a;--tone-low:#b8b3a7;--tone-none:#8f8a7f}}*,:before,:after{box-sizing:border-box}html{-webkit-text-size-adjust:100%;text-size-adjust:100%}body{background:var(--paper);color:var(--ink);font-family:var(--serif);font-optical-sizing:auto;font-kerning:normal;text-rendering:optimizelegibility;margin:0;font-size:1.0625rem;line-height:1.62}::selection{background:var(--ink);color:var(--paper)}a{color:inherit;text-decoration-line:underline;text-decoration-thickness:1px;text-decoration-color:var(--ink-3);text-underline-offset:.2em}a:hover{text-decoration-color:var(--signal);text-decoration-thickness:2px}:focus-visible{outline:2px solid var(--signal);outline-offset:3px}h1,h2,h3,h4{text-wrap:balance;font-weight:600}img{max-width:100%;height:auto}code,kbd,samp,pre{font-family:var(--mono)}.wrap{max-width:var(--wrap);margin-inline:auto;padding-inline:clamp(1.1rem,4vw,2.75rem)}.label,dt,th{font-family:var(--mono);letter-spacing:.07em;text-transform:uppercase;font-size:.75rem;font-weight:500}.sr-only{clip:rect(0 0 0 0);white-space:nowrap;width:1px;height:1px;position:absolute;overflow:hidden}.skip{position:absolute;left:-9999px}.skip:focus{z-index:10;background:var(--ink);color:var(--paper);font-family:var(--mono);padding:.5rem .75rem;font-size:.8125rem;top:1rem;left:1rem}.inline-list{flex-wrap:wrap;gap:.2rem 0;margin:0;padding:0;list-style:none;display:flex}.inline-list>li+li:before{content:"/";color:var(--ink-3);margin-inline:.65ch}.inline-list__note{color:var(--ink-2)}.masthead{border-bottom:1px solid var(--rule-strong)}.masthead__row{flex-wrap:wrap;justify-content:space-between;align-items:center;gap:.75rem 2rem;padding-block:1.1rem;display:flex}.mark{font-family:var(--mono);letter-spacing:.08em;text-transform:uppercase;align-items:center;gap:.6rem;font-size:.875rem;font-weight:600;text-decoration:none;display:inline-flex}.mark__glyph{background:var(--signal);width:.65rem;height:.65rem;display:inline-block}.nav{flex-wrap:wrap;gap:.25rem clamp(1rem,2.6vw,2.25rem);margin:0;padding:0;list-style:none;display:flex}.nav a{color:var(--ink-2);font-family:var(--mono);letter-spacing:.08em;text-transform:uppercase;border-bottom:1px solid #0000;padding-block:.2rem;font-size:.75rem;text-decoration:none;display:inline-block}.nav a:hover{color:var(--ink);border-bottom-color:var(--ink)}.nav a[aria-current]{color:var(--ink);border-bottom-color:var(--signal)}.nav__feed{border-left:1px solid var(--rule);padding-left:clamp(1rem,2.6vw,2.25rem)}.intro{grid-template-columns:var(--rail) minmax(0, 1fr);gap:clamp(2rem,5vw,4.5rem);padding-block:clamp(3rem,9vw,7rem) clamp(2.5rem,6vw,4.5rem);display:grid}.intro__title{letter-spacing:-.02em;max-width:17ch;margin:0;font-size:clamp(2.25rem,5.2vw,4rem);line-height:1.04}.intro__lede{max-width:50ch;color:var(--ink-2);text-wrap:pretty;margin:1.5rem 0 0;font-size:clamp(1.125rem,1.6vw,1.3rem);line-height:1.5}.stats{border-top:1px solid var(--rule-strong);align-self:end;margin:0}.stats>div{border-bottom:1px solid var(--rule);justify-content:space-between;gap:1rem;padding-block:.5rem;display:flex}.stats dt{color:var(--ink-3)}.stats dd{font-family:var(--mono);font-variant-numeric:tabular-nums;margin:0;font-size:.8125rem}.section-head{border-bottom:1px solid var(--rule-strong);justify-content:space-between;align-items:baseline;gap:1rem;padding-bottom:.6rem;display:flex}.section-head h2{margin:0}.section-head .label:last-child{color:var(--ink-3)}.ledger{border-collapse:collapse;width:100%}.ledger th{border-bottom:1px solid var(--rule);color:var(--ink-3);text-align:left;padding:.7rem 1rem .7rem 0}.ledger td{border-bottom:1px solid var(--rule);vertical-align:baseline;padding:1.1rem 1rem 1.1rem 0}.ledger tbody tr:hover{background:var(--paper-2)}.ledger__id,.ledger__date{width:1%;color:var(--ink-2);font-family:var(--mono);font-variant-numeric:tabular-nums;white-space:nowrap;font-size:.8125rem}.ledger__id{color:var(--ink);font-weight:500}.ledger__title a{font-size:1.1875rem;font-weight:600;line-height:1.3;text-decoration:none}.ledger__title a:hover{text-decoration:underline;text-decoration-color:var(--signal)}.ledger__sub{color:var(--ink-3);font-family:var(--mono);letter-spacing:.02em;margin-top:.3rem;font-size:.75rem;display:block}.ledger__draft{color:var(--signal)}th.ledger__rating,td.ledger__rating{text-align:right;white-space:nowrap;padding-right:0}td.ledger__rating .ledger__na{color:var(--ink-3);font-family:var(--mono)}td.ledger__rating .score{margin-right:.6rem}.empty{border-bottom:1px solid var(--rule);color:var(--ink-3);font-family:var(--mono);margin:0;padding-block:2.5rem;font-size:.8125rem}.score{font-family:var(--mono);font-variant-numeric:tabular-nums;font-size:.9375rem;font-weight:600}.sev{font-family:var(--mono);letter-spacing:.08em;text-transform:uppercase;font-size:.6875rem;font-weight:600;line-height:1.5;display:inline-block}.sev--critical{background:var(--tone-critical);color:var(--paper);padding-inline:.35rem}.sev--high{color:var(--tone-high)}.sev--medium{color:var(--tone-medium)}.sev--low{color:var(--tone-low)}.sev--none{color:var(--tone-none)}.tone--critical{color:var(--tone-critical)}.tone--high{color:var(--tone-high)}.tone--medium{color:var(--tone-medium)}.tone--low{color:var(--tone-low)}.tone--none{color:var(--tone-none)}.meter{vertical-align:-.1em;gap:2px;display:inline-flex}.meter__cell{opacity:.45;border:1px solid;width:.45rem;height:.85rem}.meter__cell.is-on{opacity:1;background:currentColor}.status{font-weight:600}.status--unpatched,.status--disputed{color:var(--signal)}.page-head{padding-block:clamp(2.5rem,6vw,4.5rem) 2.5rem}.ribbon{border-bottom:1px solid var(--rule-strong);color:var(--ink-2);font-family:var(--mono);letter-spacing:.07em;text-transform:uppercase;flex-wrap:wrap;gap:.3rem 1.5rem;padding-bottom:.7rem;font-size:.75rem;display:flex}.ribbon__id{color:var(--ink);font-weight:600}.ribbon__push{margin-left:auto}.page-title{letter-spacing:-.018em;margin:2.25rem 0 0;font-size:clamp(2rem,4.4vw,3.25rem);line-height:1.08}.page-lede{max-width:58ch;color:var(--ink-2);text-wrap:pretty;margin:1rem 0 0;font-size:1.1875rem;line-height:1.5}.tally{flex-wrap:wrap;gap:.5rem 2rem;margin:2rem 0 0;display:flex}.tally>div{align-items:baseline;gap:.6rem;display:flex}.tally dd{font-family:var(--mono);font-variant-numeric:tabular-nums;margin:0;font-size:.8125rem}.notfound .label{margin-top:1rem;display:inline-block}.facts{border-top:1px solid var(--rule-strong);margin:2.5rem 0 0}.facts>div{border-bottom:1px solid var(--rule);grid-template-columns:9.5rem minmax(0,1fr);gap:1rem;padding-block:.7rem;display:grid}.facts>div:last-child{border-bottom-color:var(--rule-strong)}.facts dt{color:var(--ink-3);padding-top:.2rem}.facts dd{font-family:var(--mono);margin:0;font-size:.875rem;line-height:1.6}.facts .cvss{flex-wrap:wrap;align-items:center;gap:.4rem .8rem;display:flex}.vector{color:var(--ink-2);word-break:break-all;flex-basis:100%;font-size:.8125rem}.about .facts{max-width:52rem}.about__prose{margin-top:1rem}.doc{padding-block:clamp(2rem,5vw,3.5rem) 0}.doc-grid{grid-template-columns:minmax(0,1fr);grid-template-areas:"head""rail""body";display:grid}.doc-head{grid-area:head;padding-top:clamp(2rem,5vw,3.5rem)}.doc-rail{grid-area:rail;margin-top:2.5rem}.doc-body{grid-area:body;min-width:0}.draft-flag{border:1px dashed var(--signal);color:var(--signal);font-family:var(--mono);letter-spacing:.07em;text-transform:uppercase;margin:0 0 1.25rem;padding:.3rem .6rem;font-size:.75rem;display:inline-block}.doc-kicker{color:var(--signal);font-family:var(--mono);letter-spacing:.02em;margin:0 0 .75rem;font-size:.9375rem;font-weight:600}.doc-title{letter-spacing:-.02em;max-width:22ch;margin:0;font-size:clamp(2rem,4.4vw,3.4rem);line-height:1.07}.doc-summary{max-width:58ch;color:var(--ink-2);text-wrap:pretty;margin:1.25rem 0 0;font-size:clamp(1.125rem,1.6vw,1.3rem);line-height:1.5}.doc-head .facts{max-width:52rem}@media (width>=64rem){.doc-grid{grid-template-columns:var(--rail) minmax(0, 1fr);column-gap:calc(clamp(2rem, 5vw, 4.5rem) + var(--hang));grid-template-areas:"rail head""rail body"}.doc-rail{align-self:start;max-height:calc(100vh - 3rem);margin-top:0;padding-top:clamp(2rem,5vw,3.5rem);position:sticky;top:1.5rem;overflow-y:auto}}.toc{border-top:1px solid var(--rule-strong)}.toc__label{border-bottom:1px solid var(--rule);color:var(--ink-3);margin:0;padding-block:.6rem}.toc ol{margin:0;padding:0;list-style:none}.toc__item a{border-bottom:1px solid var(--rule);grid-template-columns:2.25rem minmax(0,1fr);padding-block:.4rem;font-size:.9375rem;line-height:1.35;text-decoration:none;display:grid}.toc__item a:hover span:last-child{text-decoration:underline;text-decoration-color:var(--signal)}.toc__item--d3 a{color:var(--ink-2);padding-left:.75rem;font-size:.875rem}.toc__num{color:var(--ink-3);font-family:var(--mono);font-variant-numeric:tabular-nums;padding-top:.15em;font-size:.75rem}.prose{max-width:var(--measure);counter-reset:h2}.prose>*{margin-block:0}.prose>*+*{margin-top:1.1em}.prose h2{counter-increment:h2;counter-reset:h3;grid-template-columns:var(--hang) minmax(0, 1fr);border-top:1px solid var(--rule-strong);letter-spacing:-.01em;align-items:baseline;margin-top:3rem;padding-top:.9rem;font-size:1.5rem;line-height:1.25;display:grid}.prose h2:before{content:counter(h2);color:var(--signal);font-family:var(--mono);font-size:.8125rem;font-weight:500}.prose h3{counter-increment:h3;grid-template-columns:var(--hang) minmax(0, 1fr);align-items:baseline;margin-top:2.1rem;font-size:1.1875rem;line-height:1.3;display:grid}.prose h3:before{content:counter(h2) "." counter(h3);color:var(--ink-3);font-family:var(--mono);font-size:.8125rem;font-weight:500}.prose h4{margin-top:1.75rem;font-size:1.0625rem}.prose h2+*,.prose h3+*,.prose h4+*{margin-top:.75em}.prose :is(h2,h3,h4){scroll-margin-top:1.5rem}@media (width>=64rem){.prose h2,.prose h3{margin-left:calc(-1 * var(--hang))}}.prose ul,.prose ol{padding-left:1.4rem}.prose ul{list-style:"–  "}.prose li+li{margin-top:.35em}.prose li::marker{color:var(--ink-3);font-family:var(--mono);font-size:.875em}.prose blockquote{border-left:2px solid var(--rule-strong);color:var(--ink-2);margin-inline:0;padding-left:1.25rem;font-style:italic}.prose hr{border:0;border-top:1px solid var(--rule);height:0}.prose img{border:1px solid var(--rule);display:block}.prose :not(pre)>code{border:1px solid var(--rule);background:var(--paper-2);overflow-wrap:anywhere;padding:.1em .3em;font-size:.85em}.prose pre{border:1px solid var(--rule);border-left:3px solid var(--rule-strong);background:var(--paper-2);tab-size:2;padding:1rem 1.25rem;font-size:.8125rem;line-height:1.65;overflow-x:auto}.prose pre code{font-size:inherit}.prose table,.datatable{border-collapse:collapse;width:100%;font-size:.9375rem}.prose table{display:block;overflow-x:auto}.prose th,.datatable th{border-bottom:1px solid var(--rule-strong);color:var(--ink-3);text-align:left;white-space:nowrap;padding:.5rem 1rem .5rem 0}.prose td,.datatable td{border-bottom:1px solid var(--rule);vertical-align:baseline;padding:.55rem 1rem .55rem 0}.datatable__date{width:1%;font-family:var(--mono);font-variant-numeric:tabular-nums;white-space:nowrap;font-size:.8125rem}.prose a[href^=http]:after{content:"↗";font-family:var(--mono);margin-left:.1em;font-size:.75em;text-decoration:none}.prose .footnotes{border-top:1px solid var(--rule);color:var(--ink-2);margin-top:3rem;padding-top:.75rem;font-size:.9375rem}.prose .footnotes h2{clip:rect(0 0 0 0);counter-increment:none;width:1px;height:1px;position:absolute;overflow:hidden}.prose .footnotes ol{margin:0}.prose [data-footnote-ref]{font-family:var(--mono);font-size:.75em;text-decoration:none}.prose [data-footnote-ref]:before{content:"["}.prose [data-footnote-ref]:after{content:"]"}.appendix{max-width:var(--measure);margin-top:3rem}.appendix__head{grid-template-columns:var(--hang) minmax(0, 1fr);border-top:1px solid var(--rule-strong);letter-spacing:-.01em;align-items:baseline;margin:0 0 1rem;padding-top:.9rem;scroll-margin-top:1.5rem;font-size:1.5rem;line-height:1.25;display:grid}.appendix__mark{color:var(--signal);font-family:var(--mono);font-size:.8125rem;font-weight:500}@media (width>=64rem){.appendix__head{margin-left:calc(-1 * var(--hang))}}.refs{margin:0;padding:0;list-style:none}.refs li{grid-template-columns:var(--hang) minmax(0, 1fr);border-bottom:1px solid var(--rule);padding-block:.5rem;display:grid}.refs__n{color:var(--ink-3);font-family:var(--mono);font-size:.8125rem}.refs__url{color:var(--ink-3);font-family:var(--mono);overflow-wrap:anywhere;font-size:.75rem;display:block}@media (width>=64rem){.refs li{margin-left:calc(-1 * var(--hang))}}.doc-end{max-width:var(--measure);border-top:3px double var(--rule-strong);color:var(--ink-3);font-family:var(--mono);letter-spacing:.07em;text-transform:uppercase;flex-wrap:wrap;justify-content:space-between;gap:1rem;margin-top:4.5rem;padding-top:.9rem;font-size:.75rem;display:flex}.colophon{border-top:1px solid var(--rule-strong);margin-top:clamp(4rem,10vw,7rem)}.colophon__row{color:var(--ink-3);font-family:var(--mono);letter-spacing:.02em;flex-wrap:wrap;justify-content:space-between;gap:.75rem 2rem;padding-block:1.25rem 2.5rem;font-size:.75rem;display:flex}.colophon p{margin:0}@media (width<=48rem){.intro{grid-template-columns:minmax(0,1fr)}.stats{order:2}.ledger thead{clip:rect(0 0 0 0);width:1px;height:1px;position:absolute;overflow:hidden}.ledger,.ledger tbody{display:block}.ledger tr{border-bottom:1px solid var(--rule);grid-template-columns:auto auto minmax(0,1fr);grid-template-areas:"id date rating""title title title";gap:.35rem 1rem;padding-block:1rem;display:grid}.ledger td{border:0;width:auto;padding:0}.ledger__id{grid-area:id}.ledger__date{grid-area:date}td.ledger__rating{grid-area:rating}.ledger__title{grid-area:title}.facts>div{grid-template-columns:minmax(0,1fr);gap:.15rem}.ribbon__push{margin-left:0}.nav__feed{border-left:0;padding-left:0}}@media print{:root{--paper:#fff;--paper-2:#fff;--ink:#000;--ink-2:#222;--ink-3:#444;--rule:#bbb;--rule-strong:#000}body{font-size:10.5pt}.masthead nav,.skip,.doc-rail,.colophon,.doc-end a{display:none}.doc-grid{display:block}.prose h2,.prose h3,.appendix__head,.refs li{margin-left:0}.prose a[href^=http]:after{content:" (" attr(href) ")";overflow-wrap:anywhere;font-size:.8em}.prose pre{white-space:pre-wrap;border-left-width:1px}h2,h3{break-after:avoid}pre,table,.facts>div{break-inside:avoid}}