HIGH7.3npmGHSA-r96p-v3cr-gfv8· CVE-2020-28470Cross-site Scripting (XSS) in @scullyio/scullyModified: 3/13/2026