an elegant Go version manager write in rust
RUSTSEC-2026-0194: Quadratic run time when checking a start tag for duplicate attribute names
RUSTSEC-2026-0195: Unbounded namespace-declaration allocation in `NsReader` enables memory-exhaustion denial of service