mm-wki v0.2.1 is vulnerable to Cross Site Scripting (XSS).
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2021-40289.json"