Mermaid: Improper sanitization of `classDefs` in diagrams leads to CSS injection (CVE-2026-41148) | HOL Guard CVE