NPM: ApostropheCMS sanitize-html: SMIL animation namespace-prefix bypass allows javascript: URI injection (XSS)

NPM: ApostropheCMS sanitize-html: SMIL animation namespace-prefix bypass allows javascript: URI injection XSS vulnerability discovered by ? in WordPress Npm sanitize-html versions = 2.17.7, 2.18.0...

NPM: ApostropheCMS sanitize-html: nonTextTags discard region ends early on an implied close, letting <noscript> content render

NPM: ApostropheCMS sanitize-html: nonTextTags discard region ends early on an implied close, letting content render vulnerability discovered by ? in WordPress Npm sanitize-html versions 2.18.0...