CVE-2026-39826 Escaper bypass leads to XSS in html/template Published May 10, 2026 Information published.