MEDIUM6.1PackagistGHSA-pq95-94c9-j987· CVE-2025-70844yaffa vulnerable to Cross Site ScriptingModified: 4/10/2026