update loofah to >= 2.25.3 #3077

Github CI is failing related to loofah as below

Name: loofah
Version: 2.25.2
GHSA: GHSA-345x-3rq2-jfrm
Criticality: Medium
URL: GHSA-345x-3rq2-jfrm
Title: SVG <textPath> and <mpath> bypass local-reference restriction in Loofah
Solution: update to '>= 2.25.3'

Name: loofah
Version: 2.25.2
GHSA: GHSA-h6v6-rg66-fqj4
Criticality: Medium
URL: GHSA-h6v6-rg66-fqj4
Title: Mutation XSS in Loofah HTML5 scrubbers through unescaped attribute values
Solution: update to '>= 2.25.3'

Name: loofah
Version: 2.25.2
GHSA: GHSA-jcff-cj73-4w4f
Criticality: Unknown
URL: GHSA-jcff-cj73-4w4f
Title: Loofah allowed_uri? treats data:text/html as safe text/plain
Solution: update to '>= 2.25.3'

Name: loofah
Version: 2.25.2
GHSA: GHSA-m3x9-938q-5767
Criticality: Medium
URL: GHSA-m3x9-938q-5767
Title: CSS url() sanitization bypass via escaped parentheses in Loofah
Solution: update to '>= 2.25.3'

Name: loofah
Version: 2.25.2
GHSA: GHSA-mf2j-8f84-cc9q
Criticality: Medium
URL: GHSA-mf2j-8f84-cc9q
Title: Regular expression denial of service in Loofah's SVG local-reference check
Solution: update to '>= 2.25.3'

Name: loofah
Version: 2.25.2
GHSA: GHSA-p9wj-w8xq-vjx6
Criticality: Unknown
URL: GHSA-p9wj-w8xq-vjx6
Title: Loofah allowed_uri? treats javascript&#x3a alert(1) as safe
Solution: update to '>= 2.25.3'