[MEDIUM] Statamic's sensitive configuration values are exposed to content editors via Antlers-enabled fields

PKSA-74j5-mc2z-3jj1 CVE-2026-33886 GHSA-gcqf-5x9f-hq7f

Affected package: statamic/cms

Affected version: >=6.5.0,<6.7.2|>=5.73.12,<5.73.16

Reported by:
GitHub