Milkdown milkdown

• CVE-2026-57531 Medium 5.4 Milkdown < 7.21.3 DOM XSS via innerHTML Assignment 0.4%
• CVE-2026-57530 Medium 5.4 Milkdown < 7.21.3 Stored XSS via javascript: URL in link href 0.3%