[HIGH] Filament: Disabled RichEditor field state can be used for XSS

PKSA-n7tx-gkfb-14yj CVE-2026-55409 GHSA-m9cv-24rx-8mv7

Affected package: filament/forms

Affected version: >=3.0.0,<=3.3.52

Reported by:
GitHub