Openjsf Marko vulnerabilities

• marko-js marko, openjsf marko\/runtime-tags +1 more Marko: XSS via case-insensitive script/style closing tag bypass in runtime HTML escaping CVE-2026-41591 Fix available 6.4 MediumApril 22, 2026