PT-2026-39164

Insecure Deserialization in File Cache - Severity: High - CWE: CWE-502 - Location: system/src/Grav/Framework/Cache/Adapter/FileCache.php - Sink: unserialize$value, 'allowed classes' = true Affected versions - Affected: = 1.7.44 and true allows object instantiation and does not constrain classes...