invenio-previewer before 1.0.0a12 allows XSS.
"https://github.com/pypa/advisory-database/blob/main/vulns/invenio-previewer/PYSEC-2019-26.yaml"