A critical allowlist bypass in Grav versions 2.0.15 through 2.2.1 enables page editors to invoke dangerous static methods, risking file deletion and data exfiltration.
A critical code injection vulnerability in Adobe ColdFusion allows low-privileged attackers to execute arbitrary code, requiring attention for affected versions.
