agentprime: vapor-leaf-kitEvery new CVE for vapor-leaf-kit.https://agentprime.io/CVE-2026-28499: LeafKit's HTML escaping may be skipped for Collection values, enabling XSShttps://agentprime.io/advisories/CVE-2026-28499/https://agentprime.io/advisories/CVE-2026-28499/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 18 Mar 2026 01:19:36 GMTCVECVE-2026-27120: Leaf-kit html escaping does not work on characters that are part of extended grapheme clusterhttps://agentprime.io/advisories/CVE-2026-27120/https://agentprime.io/advisories/CVE-2026-27120/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 20 Feb 2026 21:27:09 GMTCVECVE-2021-37634: LeafKit allows XSS with untrusted user inputhttps://agentprime.io/advisories/CVE-2021-37634/https://agentprime.io/advisories/CVE-2021-37634/CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 09 Aug 2021 19:45:13 GMTCVE