Cyan: HTML backlink vulnerability

Cyan: Versions 0.5.0 and earlier of Cyan contain a backlink vulnerability. This vulnerability stems from a link-following issue within the src= embedding functionality in the am CLI code block. localPath only checks the path text without resolving symbolic links. An attacker can provide a...