CVE-2026-44897 Mistune Heading ID Attribute Injection XSS Information published. EPSS 0.00 CVE-2026-44897 Mistune US Microsoft Security · 28. 5. 10:06