MEDIUM6.8npmGHSA-43m5-c88r-cjvv· CVE-2020-15156XSS due to lack of CSRF validation for replying/publishingModified: 7/8/2026