[HIGH] Statamic CMS's unsafe method invocation via collection sorting allows data destruction

PKSA-fhw5-pm86-31ff CVE-2026-49287 GHSA-m92m-r54r-x8r2

Affected package: statamic/cms

Affected version: >=6.0.0,<6.20.0|<5.73.23

Reported by:
GitHub