npm›gifplayer›CVE-2025-311286.5 MEDIUMgifplayer XSS vulnerabilityXSS vulnerability. All versions under 0.3.7 are impacted