MEDIUMnpmGHSA-84hm-wfh8-c5pg· CVE-2026-44217sse-channel: SSE Injection via unsanitized event fieldsModified: 5/13/2026