Localhostlabs Karakeep vulnerabilities

• karakeep-app karakeep Karakeep's Reddit plugin content bypasses DOMPurify sanitization, enabling stored XSS CVE-2026-27627 8.2 HighFebruary 25, 2026