CVE-2026-91113 - User-controlled ClassName allows unauthorized record type change

PKSA-2h3f-jtk1-8f25 CVE-2026-91113

Affected package: silverstripe/framework

Affected version: <6.2.13

Reported by:
FriendsOfPHP/security-advisories