field notes

• 2026-02-28 CVE-2026-25087 // signed overflow in arrow's ipc reader