Ibm @carbon/charts-react vulnerabilities

• ibm @carbon/charts, @carbon/charts-angular, @carbon/charts-react +2 more +4 more IBM vulnerable to cross-site scripting (XSS) via unsanitized title truncation CVE-2026-94402 6.1 MediumOctober 20, 2026