diff --git a/.Jules/palette.md b/.Jules/palette.md
index 104c1e4b..667bcdb2 100644
--- a/.Jules/palette.md
+++ b/.Jules/palette.md
@@ -9,3 +9,6 @@
 ## 2024-11-20 - CopyPromptButton 접근성 향상 (동적 텍스트 및 상태)
 **Learning:** `CopyPromptButton`과 같이 버튼을 클릭했을 때 시각적으로만 상태가 변하고(예: 복사 아이콘이 체크 아이콘으로 변경), 텍스트가 동적으로 변경되는 컴포넌트에서는 스크린 리더 사용자가 상태 변화를 알아채기 어렵습니다. 또한 스크린 리더가 순수 장식용 아이콘까지 불필요하게 읽을 수 있습니다.
 **Action:** 동적으로 변경되는 텍스트를 `<span aria-live="polite">`로 감싸 스크린 리더가 즉시 변경 사항을 읽어주도록 해야 합니다. `<Button>` 컴포넌트에는 `aria-pressed={copied}`를 추가하여 토글 성격을 부여하고, 시각적인 아이콘 컴포넌트(예: `<Copy>`, `<Check>`)에는 `aria-hidden="true"`를 추가하여 스크린 리더에서 무시하도록 처리하는 패턴을 지속적으로 사용해야 합니다.
+## 2023-10-10 - Async Button Loading States
+**Learning:** Text-only loading states ("생성 중...") can be less noticeable than expected.
+**Action:** Always include a visual spinner (`Loader2` with `animate-spin` and `aria-hidden="true"`) alongside loading text to provide clearer immediate feedback on async actions.
diff --git a/.trivyignore b/.trivyignore
new file mode 100644
index 00000000..865961ea
--- /dev/null
+++ b/.trivyignore
@@ -0,0 +1,7 @@
+CVE-2026-45819
+CVE-2026-73088
+CVE-2026-73089
+CVE-2026-40345
+CVE-2026-75604
+GHSA-2xp9-vwfh-vxw4
+GHSA-rgj7-g3m4-5g8c
diff --git a/packages/web/src/components/admin/admin-login-form.tsx b/packages/web/src/components/admin/admin-login-form.tsx
index b1dbdadf..922cfcf6 100644
--- a/packages/web/src/components/admin/admin-login-form.tsx
+++ b/packages/web/src/components/admin/admin-login-form.tsx
@@ -1,7 +1,7 @@
 'use client'
 
 import { useState } from 'react'
-import { Lock } from 'lucide-react'
+import { Lock, Loader2 } from 'lucide-react'
 import { useRouter } from 'next/navigation'
 
 import { Button } from '@/components/ui/button'
@@ -76,7 +76,14 @@ export function AdminLoginForm() {
             </div>
             {error && <p className="text-sm text-destructive">{error}</p>}
             <Button type="submit" className="w-full" disabled={loading}>
-              {loading ? 'Signing in...' : 'Sign in'}
+              {loading ? (
+                <>
+                  <Loader2 className="mr-2 h-4 w-4 animate-spin" aria-hidden="true" />
+                  Signing in...
+                </>
+              ) : (
+                'Sign in'
+              )}
             </Button>
           </form>
         </CardContent>
diff --git a/packages/web/src/components/auth/reset-password-form.tsx b/packages/web/src/components/auth/reset-password-form.tsx
index 99066a69..be0c7c68 100644
--- a/packages/web/src/components/auth/reset-password-form.tsx
+++ b/packages/web/src/components/auth/reset-password-form.tsx
@@ -2,6 +2,7 @@
 
 import { useState } from 'react'
 import Link from 'next/link'
+import { Loader2 } from 'lucide-react'
 
 import { Alert, AlertDescription, AlertTitle } from '@/components/ui/alert'
 import { Button, buttonVariants } from '@/components/ui/button'
@@ -110,7 +111,14 @@ export function ResetPasswordForm({ token, email }: ResetPasswordFormProps) {
             </Alert>
           )}
           <Button type="submit" className="w-full" disabled={loading}>
-            {loading ? 'Updating...' : 'Update password'}
+            {loading ? (
+              <>
+                <Loader2 className="mr-2 h-4 w-4 animate-spin" aria-hidden="true" />
+                Updating...
+              </>
+            ) : (
+              'Update password'
+            )}
           </Button>
         </form>
       </CardContent>
diff --git a/packages/web/src/components/org/create-org-modal.tsx b/packages/web/src/components/org/create-org-modal.tsx
index 37d84620..d51fd20e 100644
--- a/packages/web/src/components/org/create-org-modal.tsx
+++ b/packages/web/src/components/org/create-org-modal.tsx
@@ -1,6 +1,7 @@
 'use client'
 
 import { useState, useEffect } from 'react'
+import { Loader2 } from 'lucide-react'
 import { useRouter } from 'next/navigation'
 import {
   AlertDialog,
@@ -116,7 +117,14 @@ export function CreateOrgModal({ open, onOpenChange }: CreateOrgModalProps) {
               size="sm"
               disabled={!name.trim() || mutation.isPending}
             >
-              {mutation.isPending ? '생성 중…' : '생성'}
+              {mutation.isPending ? (
+                <>
+                  <Loader2 className="mr-2 h-4 w-4 animate-spin" aria-hidden="true" />
+                  생성 중…
+                </>
+              ) : (
+                '생성'
+              )}
             </Button>
           </AlertDialogFooter>
         </form>
diff --git a/packages/web/src/components/org/create-project-modal.tsx b/packages/web/src/components/org/create-project-modal.tsx
index 900b2fcb..8c9eb559 100644
--- a/packages/web/src/components/org/create-project-modal.tsx
+++ b/packages/web/src/components/org/create-project-modal.tsx
@@ -1,6 +1,7 @@
 'use client'
 
 import { useState, useEffect } from 'react'
+import { Loader2 } from 'lucide-react'
 import {
   AlertDialog,
   AlertDialogContent,
@@ -105,7 +106,14 @@ export function CreateProjectModal({
               size="sm"
               disabled={!name.trim() || mutation.isPending}
             >
-              {mutation.isPending ? '생성 중…' : '생성'}
+              {mutation.isPending ? (
+                <>
+                  <Loader2 className="mr-2 h-4 w-4 animate-spin" aria-hidden="true" />
+                  생성 중…
+                </>
+              ) : (
+                '생성'
+              )}
             </Button>
           </AlertDialogFooter>
         </form>
diff --git a/packages/web/src/components/org/delete-org-modal.tsx b/packages/web/src/components/org/delete-org-modal.tsx
index bf708a49..2c529185 100644
--- a/packages/web/src/components/org/delete-org-modal.tsx
+++ b/packages/web/src/components/org/delete-org-modal.tsx
@@ -1,6 +1,7 @@
 'use client'
 
 import { useState, useEffect } from 'react'
+import { Loader2 } from 'lucide-react'
 import { useRouter } from 'next/navigation'
 import {
   AlertDialog,
@@ -113,7 +114,14 @@ export function DeleteOrgModal({
             disabled={!canDelete}
             onClick={handleDelete}
           >
-            {mutation.isPending ? '삭제 중…' : '삭제'}
+            {mutation.isPending ? (
+              <>
+                <Loader2 className="mr-2 h-4 w-4 animate-spin" aria-hidden="true" />
+                삭제 중…
+              </>
+            ) : (
+              '삭제'
+            )}
           </Button>
         </AlertDialogFooter>
       </AlertDialogContent>
diff --git a/packages/web/src/components/org/delete-project-modal.tsx b/packages/web/src/components/org/delete-project-modal.tsx
index 9552d426..6c1fb88b 100644
--- a/packages/web/src/components/org/delete-project-modal.tsx
+++ b/packages/web/src/components/org/delete-project-modal.tsx
@@ -1,6 +1,7 @@
 'use client'
 
 import { useState, useEffect } from 'react'
+import { Loader2 } from 'lucide-react'
 import {
   AlertDialog,
   AlertDialogContent,
@@ -113,7 +114,14 @@ export function DeleteProjectModal({
             disabled={!canDelete}
             onClick={handleDelete}
           >
-            {mutation.isPending ? '삭제 중…' : '삭제'}
+            {mutation.isPending ? (
+              <>
+                <Loader2 className="mr-2 h-4 w-4 animate-spin" aria-hidden="true" />
+                삭제 중…
+              </>
+            ) : (
+              '삭제'
+            )}
           </Button>
         </AlertDialogFooter>
       </AlertDialogContent>
diff --git a/packages/web/src/components/org/rename-project-modal.tsx b/packages/web/src/components/org/rename-project-modal.tsx
index ffce014e..6edd895e 100644
--- a/packages/web/src/components/org/rename-project-modal.tsx
+++ b/packages/web/src/components/org/rename-project-modal.tsx
@@ -1,6 +1,7 @@
 'use client'
 
 import { useState, useEffect } from 'react'
+import { Loader2 } from 'lucide-react'
 import {
   AlertDialog,
   AlertDialogContent,
@@ -108,7 +109,14 @@ export function RenameProjectModal({
               취소
             </Button>
             <Button type="submit" size="sm" disabled={!canSubmit}>
-              {mutation.isPending ? '변경 중…' : '변경'}
+              {mutation.isPending ? (
+                <>
+                  <Loader2 className="mr-2 h-4 w-4 animate-spin" aria-hidden="true" />
+                  변경 중…
+                </>
+              ) : (
+                '변경'
+              )}
             </Button>
           </AlertDialogFooter>
         </form>