This update fixes cross-site scripting (XSS) via HTML messages with malicious CSS content (CVE-2021-26925).
{ "section": "core" }