yuzutech kroki

• CVE-2025-14896 High 7.5 due to insufficient sanitazation in Vega’s `convert()` function when `safeMode` is enabled and the spec variable is an array. An attacker can craft a malicious Vega diagram specification that will all 0.3%