MI6 Intelligence Community UI Kit canary web components

• CVE-2026-112290 Medium 4.7 MI6 @ukic/canary-web-components 3.0.0-canary.12 before 3.0.0-canary.48 DOM XSS via ic-tree-item 0.2%