* Really fix CVE-2025-11563: The patch from v2025.11.04 didn't fix the CVE and the unit test verifying it was broken. * Replace `>/dev/stderr` with `>&2` for portability.