[@builder.io/qwik] @builder.io/qwik vulnerable to Cross-site Scripting

@builder.io/qwik prior to version 0.16.2 is vulnerable to cross-site scripting due to attribute names and the class attribute values not being properly handled.

References

• https://nvd.nist.gov/vuln/detail/CVE-2023-0410
• https://github.com/builderio/qwik/commit/4b2f89dbbd2bc0a2c92eae1a49bdd186e589151a
• https://huntr.dev/bounties/2da583f0-7f66-4ba7-9bed-8e7229aa578e
• https://github.com/advisories/GHSA-hm7f-rq7q-j9xp