[CRITICAL] Filament has unvalidated ColorColumn and ColorEntry values that can be used for Cross-site Scripting

PKSA-jyd3-2srm-pfqd CVE-2024-47186 GHSA-9h9q-qhxg-89xr

Affected package: filament/infolists

Affected version: >=3.0.0,<3.2.115

Reported by:
GitHub