All versions of
harp are vulnerable to Cross-Site Scripting. Due to misconfiguration of its rendering engine,
No fix is currently available. Consider using an alternative module until a fix is made available.