[MEDIUM] Craft CMS: Unauthorized Deletion of Source Assets During File Replacement

PKSA-68rr-18x7-w4gg CVE-2026-50283 GHSA-qh45-9g5p-m2v4

Affected package: craftcms/cms

Affected version: >=4.0.0-RC1,<4.17.14|>=5.0.0-RC1,<5.9.21

Reported by:
GitHub