Added:
- Security advisory GHSA-3v57-xv5m-v7m7: Multiple front-end endpoints lacking CSRF protection.
- Security advisory GHSA-mh42-m7cg-49fr: Authenticated path traversal leading to arbitrary file write via the watch `processor` field, exploiting an enum bypass through /imports/import.
- Update to docker-compose.yml: Added a description for the `ALLOW_IANA_RESTRICTED_ADDRESSES` environment variable.

Changed:
- UI: Changed the label 'Live' to 'Running' for improved clarity.
- UI: Refactored the rendering of each watchlist row out of the main template to enable reuse by the realtime update system (related to issue #4305).
- Fixed a bug to avoid division by zero when logging the watch load rate (related to issue #4289).