CVE-2026-82867: Xss Innerhtml Option Template Interpolationcve-2026-82867-xss-innerhtml-option-template-interpolation
Interpolating unescaped option values into <option> template strings and assigning to innerHTML can lead to Cross-Site Scripting (XSS). Use document.createElement('option') and assign textContent and value properties instead.