[HIGH] code16/sharp has a stored XSS via data-html-content Sanitizer Bypass

PKSA-p6zx-3z97-z7f8 CVE-2026-61825 GHSA-vj3q-vp3g-j9c8

Affected package: code16/sharp

Affected version: <9.22.5

Reported by:
GitHub