CVE-2026-126203Loofah: Mutation XSS in the HTML5 scrubbers through unescaped attribute valuesLoofah: Mutation XSS in the HTML5 scrubbers through unescaped attribute values