CVE-2026-5389: Cross-Site Scripting Vulnerability in justhtml Library
A cross-site scripting (XSS) vulnerability exists in the justhtml library, specifically in the to_markdown() function, which can be exploited by attackers to execute raw HTML when the generated Markdown is rendered. The vulnerability affects justhtml versions before 1.13.0 and has a CVSS score of 6.1. Organizations should update to version 1.13.0 or later to mitigate this vulnerability.