GHSA-fm7p-gw32-828p: mathlive's Lack of Escaping of HTML allows for XSS

MathLive, a math rendering library, has a vulnerability where the `\text{}` and `\mbox{}` commands don't properly escape HTML characters (like <, >, &, ") before inserting them into web pages, allowing XSS (cross-site scripting, where attackers inject malicious code that runs in users' browsers). This happens because the code sends raw, unescaped user input directly into the HTML markup and MathML output (a format for displaying mathematical notation).