npm: DOMPurify: SMIL attributeName=href guard is skipped when PARSER_MEDIA_TYPE is application/xhtml+xml

npm: DOMPurify: SMIL attributeName=href guard is skipped when PARSERMEDIATYPE is application/xhtml+xml vulnerability discovered by ? in WordPress npm dompurify versions = 3.4.16...