[MEDIUM] Grav: Decompression Bomb via ZipArchiver - Missing Extraction Limits

PKSA-2vrn-cxz9-yg23 CVE-2026-61690 GHSA-928x-9mpw-8h56

Affected package: getgrav/grav

Affected version: <2.0.1

Reported by:
GitHub