[HIGH] PHP object injection vulnerability allows for arbitrary code execution

PKSA-kg5m-pjr6-ystg GHSA-wq43-8r5p-w3mc

Affected package: contao/core

Affected version: >=2.0.0,<2.11.16|>=3.0.0,<3.2.7

Reported by:
FriendsOfPHP/security-advisories, GitHub