AIKIDO-2025-10048

TL;DR

Affected versions of this package are vulnerable to Cross-site Scripting (XSS) due to insufficient output escaping of user-supplied input. An attacker can exploit this vulnerability by crafting malicious inputs that are rendered unescaped in the application's output. This allows the attacker to inject and execute arbitrary scripts in the context of the victim's browser, potentially leading to data theft, session hijacking, or other malicious activities.