[HIGH] ipl/web is vulnerable to reflected XSS by malformed search requests

PKSA-k319-99m7-bjxd CVE-2026-42224 GHSA-55wf-5m3q-6jjf

Affected version: <=0.13.0

Reported by:
GitHub