[HIGH] Pimcore CMS Twig Sandbox Bypass via SecurityPolicy checkMethodAllowed

PKSA-6dhb-gq75-qpgr CVE-2026-11407 GHSA-7p36-fq2r-4h7r

Affected package: pimcore/pimcore

Affected version: <=11.5.14.1|>=12.0.0-RC1,<=12.3.8

Reported by:
GitHub