—GoGO-2026-5320· CVE-2026-5160, GHSA-c97m-vxhj-p7j6Cross-site Scripting (XSS) in github.com/yuin/goldmarkModified: 7/22/2026