[MEDIUM] Winter: Local File Inclusion through @import directives in LESS compilation of backend customizable stylesheets and theme assets

PKSA-54hz-1x12-hy82 CVE-2026-63179 GHSA-58fp-mcx6-7qf9

Affected package: winter/wn-backend-module

Affected version: <=1.2.12

Reported by:
GitHub