TI-2026-62215 CVE-2026-92106
lazy_html serializes SVG and MathML style and script text unescaped, allowing mutation XSS
Priority LOW 12
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in dashbitco lazy_html allows mutation XSS via a parse and serialize round-trip of attacker-supplied HTML.