From 3097b2316094c6b5ea9314fa7a5716d56cd0b448 Mon Sep 17 00:00:00 2001
From: Radosvet Petrov <93radosvet@gmail.com>
Date: Sun, 22 Feb 2026 19:32:54 +0000
Subject: [PATCH 1/2] fix(ui): escape special characters in description

---
 app/components/Compare/PackageSelector.vue | 5 ++---
 app/components/Package/TableRow.vue        | 5 ++---
 2 files changed, 4 insertions(+), 6 deletions(-)

diff --git a/app/components/Compare/PackageSelector.vue b/app/components/Compare/PackageSelector.vue
index 54cbdb950..f58c9665e 100644
--- a/app/components/Compare/PackageSelector.vue
+++ b/app/components/Compare/PackageSelector.vue
@@ -306,9 +306,8 @@ function handleFocus() {
             <span
               v-if="result.description"
               class="text-xs text-fg-muted truncate mt-0.5 w-full block"
-            >
-              {{ result.description }}
-            </span>
+              v-html="result.description"
+            />
           </ButtonBase>
         </div>
       </Transition>
diff --git a/app/components/Package/TableRow.vue b/app/components/Package/TableRow.vue
index 017d1b289..8088830fd 100644
--- a/app/components/Package/TableRow.vue
+++ b/app/components/Package/TableRow.vue
@@ -68,9 +68,8 @@ const allMaintainersText = computed(() => {
     <td
       v-if="isColumnVisible('description')"
       class="py-2 px-3 text-sm text-fg-muted max-w-xs truncate"
-    >
-      {{ pkg.description || '-' }}
-    </td>
+      v-html="pkg.description || '-'"
+    />
 
     <!-- Downloads -->
     <td

From 00e63d7795dd8ddde5a4a5de69e87f2989eab281 Mon Sep 17 00:00:00 2001
From: Radosvet Petrov <93radosvet@gmail.com>
Date: Sun, 22 Feb 2026 20:25:55 +0000
Subject: [PATCH 2/2] fix(ui): using the decodeHtmlEntities instead of v-html

---
 app/components/Compare/PackageSelector.vue | 5 +++--
 app/components/Package/TableRow.vue        | 5 +++--
 2 files changed, 6 insertions(+), 4 deletions(-)

diff --git a/app/components/Compare/PackageSelector.vue b/app/components/Compare/PackageSelector.vue
index f58c9665e..2c45b3d18 100644
--- a/app/components/Compare/PackageSelector.vue
+++ b/app/components/Compare/PackageSelector.vue
@@ -306,8 +306,9 @@ function handleFocus() {
             <span
               v-if="result.description"
               class="text-xs text-fg-muted truncate mt-0.5 w-full block"
-              v-html="result.description"
-            />
+            >
+              {{ decodeHtmlEntities(result.description) }}
+            </span>
           </ButtonBase>
         </div>
       </Transition>
diff --git a/app/components/Package/TableRow.vue b/app/components/Package/TableRow.vue
index 8088830fd..ce7929293 100644
--- a/app/components/Package/TableRow.vue
+++ b/app/components/Package/TableRow.vue
@@ -68,8 +68,9 @@ const allMaintainersText = computed(() => {
     <td
       v-if="isColumnVisible('description')"
       class="py-2 px-3 text-sm text-fg-muted max-w-xs truncate"
-      v-html="pkg.description || '-'"
-    />
+    >
+      {{ decodeHtmlEntities(pkg.description || '-') }}
+    </td>
 
     <!-- Downloads -->
     <td