MEDIUM PyPI GHSA-3gxm-wfjx-m847 · CVE-2026-42052 beets has a Cross-site Scripting vulnerability Modified: 6/24/2026