[HIGH] code16 Sharp vulnerable to stored XSS via iframe srcdoc Attribute

PKSA-735v-pwws-tf2j CVE-2026-61823 GHSA-qxg3-46rw-79j8

Affected package: code16/sharp

Affected version: <9.22.5

Reported by:
GitHub