[MEDIUM] Filament: Unvalidated ImageColumn and ImageEntry values can be used for XSS

PKSA-jm9c-w1fc-4m3p CVE-2026-48167 GHSA-3fc8-8hp6-6jr4

Affected package: filament/infolists

Affected version: >=5.0.0,<=5.6.4|>=4.0.0,<=4.11.4

Reported by:
GitHub