GHSA-XFQ5-W38Q-PC2X Nuxt server islands render `useHeadSafe` input without sanitisation

Impact useHeadSafe restricts head input to an allowlist of safe tags and attributes. For example, bodyAttrs is limited to class and style, event handler attributes are removed, and tags are only kept for JSON types. When useHeadSafe is called inside a server island a .server.vue component or page...