CVE-2026-13221: do not build a regex trie when the branch-to-tail delta would overflow the 16-bit next-offset field, which could otherwise truncate the trie decision table (GH#23388)
CVE-2026-57432: fix integer overflow in S_measure_struct when computing the size of a pack/unpack structure with a large repeat count, which could wrap the signed size negative and lead to an out-of-bounds heap read