CVE-2026-56865: Tlog Tilehashreader Unauthenticated Tile Bypasscve-2026-56865-tlog-tilehashreader-unauthenticated-tile-bypass
Authenticating transparency log child tiles using `len(stx)` as the starting index instead of the actual number of tiles fetched (`stxTileOrder[len(stx)-1] + 1`) allows unauthenticated tiles to bypass parent hash verification when multiple subtree hashes share a tile.
