CVE-2026-74793: Justhtml Untracked Cloned Node Projectioncve-2026-74793-justhtml-untracked-cloned-node-projection
Cloned DOM nodes are projected and appended without propagating sanitization actions or re-sanitizing, which can bypass XSS filters if the original nodes contained deferred sanitization markers.